Lucene search
+L

16221 matches found

osv_azl
osv_azl
•added 2026/05/07 8:16 p.m.•32 views

AZL-86526 CVE-2026-33814 affecting package kubevirt for versions less than 1.7.1-7

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6AI score0.00781EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/07 8:16 p.m.•17 views

AZL-86547 CVE-2026-33814 affecting package packer for versions less than 1.9.5-15

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6AI score0.00781EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/05/07 8:16 p.m.•28 views

UBUNTU-CVE-2026-33814

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6AI score0.00781EPSS
SaveExploits0References14
Debian CVE
Debian CVE
•added 2026/05/07 7:41 p.m.•78 views

CVE-2026-33814

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6.7AI score0.00781EPSS
SaveExploits0
Mend
Mend
•added 2026/05/07 7:41 p.m.•5 views

CVE-2026-33814

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

8.7CVSS6.2AI score0.00781EPSS
SaveExploits0References73
CVE
CVE
•added 2026/05/07 7:41 p.m.•280 views

CVE-2026-33814

CVE-2026-33814 describes an infinite loop in HTTP/2 transport when a SETTINGS_MAX_FRAME_SIZE value of 0 is processed in net/http/internal/http2 (golang.org/x/net). Affected component is the HTTP/2 transport; root cause is improper handling of SETTINGS frames causing repeated CONTINUATION frames, ...

7.5CVSS6.7AI score0.00781EPSS
SaveExploits0References70Affected Software2
Cvelist
Cvelist
•added 2026/05/07 7:41 p.m.•158 views

CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

0.00781EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/07 7:41 p.m.•24 views

EUVD-2026-28420

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

5.8AI score0.00781EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/07 7:41 p.m.•14 views

CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

6.7AI score0.00781EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/07 7:41 p.m.•25 views

CVE-2026-33814

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

5.8AI score0.00781EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2026/05/07 7:41 p.m.•24 views

CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6.7AI score
SaveExploits0References73
AlpineLinux
AlpineLinux
•added 2026/05/07 7:41 p.m.•97 views

CVE-2026-33814

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6.7AI score0.00781EPSS
SaveExploits0
Snyk
Snyk
•added 2026/05/07 7:21 p.m.•25 views

Infinite loop

Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

8.7CVSS5.8AI score0.00781EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/07 7:21 p.m.•33 views

Infinite loop

Overview golang.org/x/net/http2 is a work-in-progress HTTP/2 implementation for Go. Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receiv...

8.7CVSS5.8AI score0.00781EPSS
SaveExploits0References3
osv_go
osv_go
•added 2026/05/07 7:21 p.m.•62 views

GO-2026-4918 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6AI score0.00781EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2026/05/07 7:14 p.m.•40 views

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pypdf-6.6.0-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in pypdf-6.6.0-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-24688 DESCRIPTION: pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior t...

5.1CVSS5.4AI score0.00451EPSS
SaveExploits3Affected Software1
osv_jlsec
osv_jlsec
•added 2026/05/07 5:12 p.m.•27 views

JLSEC-2026-474

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local user to consume all available system resources and cause a denial of service condition...

5.5CVSS6AI score0.00475EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2026/05/07 9:48 a.m.•32 views

CVE-2026-43863

A flaw was found in mutt, an email client. A remote attacker could exploit this vulnerability by sending specially crafted input, which would trigger an infinite loop in the dataobjecttostream function. This issue, located in the crypt-gpgme.c component, can lead to a Denial of Service DoS, causi...

3.7CVSS5.9AI score0.00321EPSS
SaveExploits0References4
osv_bit
osv_bit
•added 2026/05/07 8:39 a.m.•16 views

BIT-DOTNET-SDK-2026-33116 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS6.8AI score0.02444EPSS
SaveExploits0References22
osv_bit
osv_bit
•added 2026/05/07 8:39 a.m.•32 views

BIT-DOTNET-2026-33116 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS6.8AI score0.02444EPSS
SaveExploits0References22
Rows per page
Query Builder