16126 matches found
httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server
A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...
CVE-2026-14258 Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser ...
CVE-2026-14258 Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser ...
PT-2026-54855
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-51 ImageMagick versions prior to 7.1.2-26 Description An infinite loop occurs when invalid arguments are provided to the connected-components option. Recommendations Update to version 6.9.13-51. Update to...
CVE-2026-55595: Uncontrolled Resource Consumption
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26...
RHEL 9 : dnsmasq (RHSA-2026:34508)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:34508 advisory. The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server forwarder and DHCP Dynamic Host Configuration Protocol server...
PT-2026-63443
Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.6.3 through 8.1.2 Description An infinite loop exists in the RTP/ASF demuxer within libavformat/rtpdec asf.c. This occurs because the rtp asf fix header function does not validate a minimum chunksize when iterating over ASF...
ImageMagick: ImageMagick: Denial of Service via crafted MIFF file
A flaw was found in ImageMagick. A remote attacker could provide a specially crafted MIFF Magick Image File Format file, which, due to a missing check in the MIFF decoder, would lead to an infinite loop. This vulnerability results in CPU exhaustion, causing a Denial of Service DoS for the affecte...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-29790 DESCRIPTION: dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path...
smb/client: fix possible infinite loop and oob read in symlink_data()
...
CVE-2026-6519
A flaw was found in Wireshark. A remote attacker could exploit an infinite loop vulnerability within the MBIM Mobile Broadband Interface Model protocol dissector. This could lead to a denial of service DoS condition, making the application unresponsive. Mitigation To mitigate this issue, avoid...
EulerOS 2.0 SP15 : expat (EulerOS-SA-2026-2480)
According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.CVE-2026-32778...
Hackney has an infinite loop on non-token byte at start of an Alt-Svc entry
Summary CVE-2026-47066 is an infinite loop CWE-835 in hackney's Alt-Svc response header parser src/hackneyaltsvc.erl. When an HTTP server returns an Alt-Svc header whose value begins with a non-token byte e.g. !, @, =, ;, the parser enters a tight tail-recursive loop that pins an Erlang scheduler...
EUVD-2026-31686
Hackney has an infinite loop on non-token byte at start of an Alt-Svc entry...
GHSA-6CP8-V795-JR2J Hackney has an infinite loop on non-token byte at start of an Alt-Svc entry
Summary CVE-2026-47066 is an infinite loop CWE-835 in hackney's Alt-Svc response header parser src/hackneyaltsvc.erl. When an HTTP server returns an Alt-Svc header whose value begins with a non-token byte e.g. !, @, =, ;, the parser enters a tight tail-recursive loop that pins an Erlang scheduler...
DEBIAN-CVE-2026-53312
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather-end of ULONGMAX, but if this happens it will infinite loop because of the overflow. Also avoid...
CVE-2026-53312
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather-end of ULONGMAX, but if this happens it will infinite loop because of the overflow. Also avoid...
CVE-2026-53312 iommu/riscv: Remove overflows on the invalidation path
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather-end of ULONGMAX, but if this happens it will infinite loop because of the overflow. Also avoid...
EUVD-2026-39847
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather-end of ULONGMAX, but if this happens it will infinite loop because of the overflow. Also avoid...
CVE-2026-53312
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it should support a gather-end of ULONGMAX, but if this happens it will infinite loop because of the overflow. Also avoid...