41358 matches found
ROS-20260922-73-0105
The vulnerability in the 389-ds-base is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260922-73-0136
The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260922-73-0026
The vulnerability in gstreamer1-plugins-good is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260922-73-0015
A vulnerability exists in the implementation of the audio/video processing protocol in the gst-libav library of the GStreamer multimedia framework. This vulnerability relates to the pointer release mechanism, which allows a malicious actor to cause an unexpected termination of the application a...
CVE-2026-88341
A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...
ROS-20260922-73-0078
The vulnerability in Tomcat is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
Reachable Assertion
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Reachable Assertion via an assertion failure in NixlBaseConnectorWorker.applyprefixcaching, which fails to properly validate block counts across...
PYSEC-2026-4005
vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...
CVE-2026-94623
vLLM through version 0.29.0 is affected by a denial of service vulnerability in the NIXL connector's prefix caching implementation. The root cause is a failure to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. An unauthenticated...
CVE-2026-94623 vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure
vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...
CVE-2026-94623 vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure
vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...
CVE-2026-94623 vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure
vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...
EUVD-2026-84178
The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...
SUSE CVE-2026-90070
In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24status ignores the result of the transport read and returns data even when no byte was received. The I2C transport, for example, skips i2cmasterrecv when the register-sele...
Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in nghttp2 and libarchive
Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source packages nghttp2 and libarchive that are affected by three high-severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Detail...
SUSE CVE-2026-90200
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...
Security Bulletin: IBM Optim 1.0.0, 1.1.0 impacted by a denial of service vulnerability in quic-go
Summary quic-go github.com/quic-go/quic-go is used by IBM Optim as part of its network transport layer, providing a Go implementation of the QUIC protocol used for high-performance HTTP/3 communication.CVE-2025-59530 — A denial of service vulnerability exists in quic-go prior to version 0.54.1. A...
AZL-105066 CVE-2026-94184 affecting package fetchmail 6.4.39-2
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...
glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration
A flaw was found in the GNU C Library glibc DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from...