25248 matches found
CVE-2026-11828
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...
EUVD-2026-104473
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...
CVE-2026-11828 IBM MQ Buffer Overflow
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...
CVE-2026-11828
IBM MQ is vulnerable to a buffer overflow caused by improper validation of queue name length values. A remote attacker with queue manager control or man-in-the-middle access on unencrypted channels can exploit this to cause a denial of service in client applications utilizing asynchronous message...
CVE-2026-11828 IBM MQ Buffer Overflow
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...
OPENSUSE-SU-2026:22133-1 Security update for tinyproxy
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding boo1268474, CVE-2026-54387 - Fixed failure to reject requests containing multiple Content-Length headers with differing values boo1268475,...
Eclipse ThreadX – NetX Duo: Improper exception handling leads to vulnerabilities
Eclipse ThreadX – The version 6.4.2 to 6.5.1.202602 of NetX Duo contains security vulnerabilities. These vulnerabilities arise from the HTTP server of Web Add-ons detecting a Content-Length overflow when processing PUT requests. This leads to the dereferencing and release of uninitialized pointer...
`wasi-http`: Guests can add conflicting content lengths to messages
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-r8xh-cgf7-392j For more information see the GitHub-hosted security advisory...
`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9prg-84vf-g5fc For more information see the GitHub-hosted security advisory...
CVE-2026-11828: Buffer Copy without Checking Size of Input
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...
PT-2026-117504
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...
ROS-20261019-73-0036
The vulnerability in python-ecdsa is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service failures...
SUSE CVE-2026-98597
In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...
DEBIAN-CVE-2026-98578
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data1 as the DSFID. Require the prefix an...
DEBIAN-CVE-2026-98638
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Validate the SVE vector length in pkvmvcpuinitsve pkvmvcpuinitsve clamps only the upper bound of the host-provided svemaxvl, so an invalid vector length reaches svestatesizefromvl and the WARNON there, which is fatal ...
DEBIAN-CVE-2026-98597
In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...
CVE-2026-98638
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Validate the SVE vector length in pkvmvcpuinitsve pkvmvcpuinitsve clamps only the upper bound of the host-provided svemaxvl, so an invalid vector length reaches svestatesizefromvl and the WARNON there, which is fatal ...
CVE-2026-98597
In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...
AZL-108696 CVE-2026-98597 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...
UBUNTU-CVE-2026-98597
In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The followi...