Lucene search
K

75 matches found

RedhatCVE
RedhatCVE
added 2026/04/06 6:37 p.m.2 views

CVE-2026-35549

A flaw was found in MariaDB Server. When the cachingsha2password authentication plugin is installed and used by some user accounts, a low-privileged authenticated user can send a specially crafted large packet. This can cause the server to crash due to an issue with the sha256cryptr function's us...

6.5CVSS5.8AI score0.00053EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/06 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-35549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication...

6.5CVSS6AI score0.00053EPSS
Exploits0References3
NVD
NVD
added 2026/04/03 5:16 a.m.1 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS0.00053EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/04/03 5:16 a.m.1 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS5.9AI score0.00053EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/03 5:0 a.m.1 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS5.9AI score0.00053EPSS
Exploits0References1
CVE
CVE
added 2026/04/03 5:0 a.m.21 views

CVE-2026-35549

Summary: CVE-2026-35549 affects MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password plugin is installed and some accounts use it, a large packet can crash the server because sha256_crypt_r uses alloca. Impact: Availability is HI...

6.5CVSS5.9AI score0.00053EPSS
Exploits0References1Affected Software1
MariaDBUnix
MariaDBUnix
added 2026/04/03 5:0 a.m.4 views

CVE-2026-35549

Disclaimer: This data contains information about vulnerable...

6.5CVSS5.9AI score0.00053EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/04/03 5:0 a.m.4 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS5.8AI score0.00053EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: corosync (UTSA-2026-005515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005515 advisory. Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in orftokenendianconvert in...

9.8CVSS6.2AI score0.00157EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-1424

Malware in sbrugna...

7.5CVSS7.6AI score0.00528EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-1787

Malware in sbrugna...

7.7CVSS6.3AI score0.00865EPSS
Exploits0References20
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2011-1153

Malware in sbrugna...

4.3CVSS7.3AI score0.05271EPSS
Exploits1References32
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-36049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socket.io-parser before 3.4.1 allows attackers to cause a denial of service memory consumption via a large packet because a concatenation approach is used...

7.5CVSS7.1AI score0.00528EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/07/10 1:25 p.m.3 views

CVE-2025-27058

Memory corruption while processing packet data with exceedingly large packet...

7.8CVSS7.5AI score0.00068EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.1 views

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that originates from imprope...

8.6CVSS7.9AI score0.01094EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 8:0 p.m.52 views

K25423748: QEMU vulnerability CVE-2019-14378

Security Advisory Description ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. CVE-2019-14378 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Statu...

8.8CVSS7.5AI score0.06468EPSS
Exploits3
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.1 views

SUSE CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

7.5CVSS7.8AI score0.03797EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.2 views

SUSE CVE-2013-4387

net/ipv6/ip6output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload UFO processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service memory corruption and system crash or...

6.1CVSS7.4AI score0.0062EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:35 a.m.2 views

SUSE CVE-2013-4563

The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service panic via a lar...

7.1CVSS5.6AI score0.01558EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:28 a.m.1 views

SUSE CVE-2014-4174

wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted packet-trace file that includes a large packet...

9.3CVSS8AI score0.01498EPSS
Exploits1References3
Rows per page
Query Builder