Lucene search
+L

11 matches found

SUSE CVE
SUSE CVE
•added 2026/09/16 12:03 a.m.•13 views

SUSE CVE-2026-89090

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

5.9CVSS6AI score0.00305EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-89090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to...

8.2CVSS6AI score0.00305EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•3 views

CVE-2026-89090: Uncaught Exception

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

8.2CVSS6AI score0.00305EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/07/30 7:44 a.m.•23 views

org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size...

7.5CVSS5.7AI score0.0087EPSS
SaveExploits0References6
OSV
OSV
•added 2021/11/19 11:04 a.m.•10 views

OESA-2021-1435 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: In Apache MINA, a...

6.5CVSS8.3AI score0.04634EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2021/11/03 5:30 p.m.•49 views

Infinite loop in Apache MINA

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS0.4AI score0.04634EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2021/11/01 9:15 a.m.•12 views

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS7AI score0.04634EPSS
SaveExploits0References2
Mend
Mend
•added 2021/11/01 8:35 a.m.•4 views

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

7.1CVSS0.04634EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/01 12:00 a.m.•4 views

CVE-2021-41973: Loop with Unreachable Exit Condition

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS6AI score0.04634EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/01 12:00 a.m.•19 views

Apache MINA 安全漏洞

Apache MINA is a web application framework from the Apache Foundation. A denial-of-service vulnerability exists in Apache MINA, which is caused by improper handling of HTTP message header requests in Apache MINA. An attacker could exploit this vulnerability to potentially cause an infinite loop i...

6.5CVSS7.7AI score0.04634EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2021/11/01 12:00 a.m.•2 views

PT-2021-23461

Name of the Vulnerable Software and Affected Versions Apache MINA versions prior to 2.1.5 Description A specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if...

6.5CVSS0.04634EPSS
SaveExploits0References255
Rows per page
Query Builder