40 matches found
ROOT-APP-GOBINARY-CVE-2026-63209 CVE-2026-63209 in github.com/klauspost/compress - Patched by Root
Root has patched CVE-2026-63209 in the github.com/klauspost/compress package for Root:Go. Multiple fixed versions available...
CVE-2026-116591
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
github.com/klauspost/compress: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
github.com/klauspost/compress: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Compress/s2: Integer Overflow Or Wraparound And Out-of-bounds Write In Compress
Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in "s2.NewDict" allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding "MaxInt64". When "Dict.Encode" is subsequently called, the overflowed...
GHSA-259R-337F-4RFW Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently called, the overflowed negati...
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently called, the overflowed negati...
openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:22117-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22117-1 advisory. Changes in cadvisor: - update to 0.60.6: workflows: mirror release tags to lib/ module tags fs/zfs: fall back to VFS when zfs stats are unavailable...
SUSE-SU-2026:4661-1 Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283672. Changes for google-osconfig-agent: Update to version...
OPENSUSE-SU-2026:22117-1 Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.6: workflows: mirror release tags to lib/ module tags fs/zfs: fall back to VFS when zfs stats are unavailable storage/stdout: nil-check Cpu, Network, and Memory stats Treat memory-only NUMA nodes as valid...
openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22039-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22039-1 advisory. This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...
Security update for distribution (important)
openSUSE security update: security update for distribution ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22039-1 Rating: important References: bsc1283762 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...
SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2026:4554-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4554-1 advisory. This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in...
SUSE-SU-2026:24153-1 Security update for distribution
This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283762...
CVE-2026-63209
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...
github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...
github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...
github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...
github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...
github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...