31 matches found
CVE-2026-26445
stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...
CVE-2026-26445: Allocation of Resources Without Limits or Throttling
stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...
CVE-2026-26445
stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...
CVE-2026-26445
The stomper 5e2741e message broker is vulnerable to a Denial of Service (DoS) attack. A remote attacker can exploit this by sending partial STOMP (Streaming Text Oriented Messaging Protocol) frames while maintaining open TCP connections. Due to the broker's use of edge-triggered epoll (EPOLLET) a...
CVE-2026-46015: Incorrect Behavior Order: Early Amplification
In the Linux kernel, the following vulnerability has been resolved: tcp: call skdataready after listener migration When inetcsklistenstop migrates an established child socket from a closing listener to another socket in the same SOREUSEPORT group, the target listener gets a new accept-queue entry...
CVE-2026-46015: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tcp: call skdataready after listener migration When inetcsklistenstop migrates an established child socket from a closing listener to another socket in the same SOREUSEPORT group, the target listener gets a new accept-queue entry...
Fedora 40 : libuev (2024-40fbf3ee48)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-40fbf3ee48 advisory. Security fix for CVE-2022-48620 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
CVE-2024-26606
In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In epoll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDERWRITEREAD without a read buffer...
CVE-2024-26606 binder: signal epoll threads of self-work
In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In epoll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDERWRITEREAD without a read buffer...
openSUSE 15 Security Update : libuev (openSUSE-SU-2024:0023-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0023-1 advisory. - uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number. CVE-2022-48620 Note that Nessus has not tested for this...
SUSE CVE-2022-48620
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
CVE-2022-48620
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
Buffer overflow
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
UBUNTU-CVE-2022-48620
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
CVE-2022-48620
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
CVE-2022-48620
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
CVE-2022-48620: Buffer Copy without Checking Size of Input
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
CVE-2022-48620
uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...
CVE-2022-48620
CVE-2022-48620 affects libuev (uev) up to version 2.4.1, with a possible buffer overflow in uev_run() triggered by a large maxevents in epoll_wait. Debian 11 LTS has fixed this in 2.3.1-1+deb11u1, and Fedora advisories indicate a security update addressing the CVE, though a specific patched versi...