ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003497 advisory. The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An...

EUVD-2021-10299

Malware in sbrugna...

PYSEC-2024-244

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

PT-2006-1142 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD version 6.0-RELEASE Description: The issue allows remote attackers to cause a denial of service, leading to a firewall crash. This is achieved through ICMP IP fragments that match a reset, reject, or unreach action, resulting in acces...

Linux Kernel 2.1.892.2.x - Zero-Length Fragment

Linux Kernel 2.1.892.2.x - Zero-Length Fragment / source: https://www.securityfocus.com/bid/2247/info Linux kernel versions 2.1.89 to 2.2.3 are vulnerable to a denial of service attack caused when a 0-length IP fragment is received, if it is the first fragment in the list. Several thousands...