843 matches found
CVE-2026-18649
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...
Malicious code in sme-crm-services-sme-crm-services-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ec89cd09f6d62ee7e1a0e509712ee53f41f3ebba4139453cf1e3a1080fe3c9 On require of the package, index.js loads vendor.js which selects an OS/architecture-specific URL path, downloads an opaque binary over HTTPS from...
CVE-2026-64355
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter devmap feature. When handling devmap broadcast redirects, fragmented network frames are not properly managed during the cloning process. This can lead to an out-of-bounds access, where the system attempts to read or write data beyo...
SUSE CVE-2026-64355
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
CVE-2026-64355
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
UBUNTU-CVE-2026-64355
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
CVE-2026-64355 bpf: Reject fragmented frames in devmap
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
CVE-2026-64355
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
EUVD-2026-48899
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
CVE-2026-64355
CVE-2026-64355 (Linux kernel) shows a fix for a vulnerability in BPF devmap handling of fragmented frames. In native XDP, cloning fragmented frames could carry skb_shared_info in tailroom outside the linear area, leaving XDP_FLAGS_HAS_FRAGS set but with invalid frag metadata. The subsequent free ...
CVE-2026-64355 bpf: Reject fragmented frames in devmap
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinf...
PT-2026-64576
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf component where devmap broadcast redirects clone packets for all but the last destination. In native XDP, the clone path only copies linear xdp frame data, whi...
CVE-2026-53366
A flaw was found in the Linux kernel's handling of IPv4 network packets. An error in how the kernel accounts for fragmented data during memory allocation can lead to an undersized memory buffer. This memory handling issue could potentially be exploited by a remote attacker to cause a system crash...
Linux Distros Unpatched Vulnerability : CVE-2026-62389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments,...
CVE-2026-62389
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-48779...
CVE-2026-62389
CVE-2026-62389 affects the ws library (before 8.21.1). The root cause is a memory exhaustion condition in lib/receiver.js where the fragment guard only triggers at maxFragments, allowing an attacker to exhaust heap memory by sending incomplete fragmented WebSocket messages (text frame FIN=0 plus ...
EUVD-2026-44729
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments, allowing attackers to exhaust memory by sending incomplete fragmented WebSocket messages. Attackers can send a text frame with FIN=0...
CVE-2026-62389 ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments, allowing attackers to exhaust memory by sending incomplete fragmented WebSocket messages. Attackers can send a text frame with FIN=0...