14313 matches found
CVE-2026-97688
A flaw was found in urllib3. A malicious server can trigger a Denial of Service DoS by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data...
CVE-2022-0778
CVE-2022-0778 该漏洞会在解析椭圆曲线密钥时触发 OpenSSL 中 BNmodsqrt 函数的无限循环。这意味着一个恶意构造的 X.509 证书可以对任何未修补的服务器发起 DoS 攻击。 漏洞的核心在于解析以压缩格式表示点的 EC 密钥过程中：在解析此类密钥时，OpenSSL 会尝试扩展压缩点，试图计算曲线定义素数 p 的模平方根。然而，p 的素性未在任何地方检查，即使在需要它的 BNmodsqrt 中也不例外；因此，由于 p 不是预期的素数，实现中的一个错误会导致无限循环。 中文版说明可以见我的博客OpenSSL CVE-2022-0778漏洞问题复现与非法证书构造 致...
CVE-2026-97688
The Python HTTP client library urllib3 versions 2.6.2 through 2.8.0 are vulnerable to an infinite loop during chunked Deflate streaming. The issue exists because the Deflate decoder retains trailing bytes as unconsumed input after reaching the end-of-stream, repeatedly decoding them without progr...
EUVD-2026-89007
urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.readchunked can enter an infinite loop because the Deflate decoder retains trailing bytes as unconsumed input after reaching end-of-stream and repeatedly decodes them without progress. The...
CVE-2026-97688 urllib3: Chunked Deflate streaming can enter an infinite loop
urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.readchunked can enter an infinite loop because the Deflate decoder retains trailing bytes as unconsumed input after reaching end-of-stream and repeatedly decodes them without progress. The...
cve-2026-24688
CVE-2026-24688 - pypdf - Vulnerabilidad DoS por Referencia Circular Este repositorio incluye código de prueba de concepto para desencadenar la CVE-2026-24688. Resumen Vulnerabilidad crítica de denegación de servicio en la lógica de análisis de esquemas marcadores de pypdf. Al procesar un PDF con...
CVE-2023-30226
CVE-2023-30226 Rizin es un framework de ingeniería inversa bifurcado de radare2, se descubrió una falla en su código de análisis ELF que permitiría que un archivo manipulado realizara una denegación de servicio. Esto impediría que un usuario pudiera cargar el archivo en rizin, pero no tendría...
CVE-2026-96418
A flaw was found in Wireshark. By convincing a user to open a specially crafted packet capture containing Tagged Image File Format TIFF data, an attacker can trigger an infinite loop in the TIFF protocol dissector. This issue causes the application to hang and become unresponsive, resulting in a...
CVE-2026-95386
A flaw was found in Wireshark. By tricking a user into opening a specially crafted TTL file, an attacker can trigger an infinite loop in the file parser. This issue causes the application to hang or become unresponsive, resulting in a Denial of Service DoS. Mitigation Mitigation for this issue is...
CVE-2026-97411
A flaw was found in the Linux kernel's IBM EMAC network driver. During module removal, the driver unconditionally attempts to disable network polling routines even if they were never enabled or were already stopped. This improper state handling causes the kernel to enter an infinite loop, resulti...
CVE-2026-96421
A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by convincing a user to open a specially crafted packet capture file containing malformed Universal Serial Bus Human Interface Device USB HID traffic. When processing the malformed data, the USB...
CVE-2026-96418
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-96421
USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...
dsa
Un Resumen de la Vulnerabilidad crypto/dsa de Go CVE-2016-3959 Alex Mullins 9 de abril de 2016 Introducción Recientemente, se descubrió un error en la biblioteca criptográfica del Algoritmo de Firma Digital DSA para el lenguaje de programación Go. En este artículo revisaremos los detalles del err...
EUVD-2026-88683
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...
CVE-2026-95386
A vulnerability in the TTL file parser of Wireshark (versions 4.6.0 to 4.6.8 and 4.4.19 ) allows for a denial of service (DoS) due to an infinite loop with an unreachable exit condition. Impacted software is the Wireshark network protocol analyzer. Remediation is available by updating to the late...
CVE-2026-95386 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...
