25270 matches found
Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc (crlsa-2024_3253)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243253 advisory. libvirt: negative gnew0 length can lead to unbounded memory allocation CVE-2024-2494 Tenable has extracted the preceding description block directly from the CIQ...
PT-2026-105559
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go...
AlmaLinux 9.2 [TuxCare] Security Update: frr / frr-selinux (ALMALINUX9.2:CLSA-2025:1762181946)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762181946 advisory. - bgpd/bgpflowspec.c in FRRouting FRR before 8.4.3 mishandles an nlri length of zero, aka a flowspec overflow. CVE-2023-38406 Note that Nessu...
PT-2026-105615
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk...
Rocky Linux 8 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc (crlsa-2021_4489)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214489 advisory. rpm: missing length checks in hdrblobInit CVE-2021-20266 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...
CLEANSTART-2026-UH45267 NewNTUnicodeString does not check for string length overflow
Security vulnerability affects the crane package. NewNTUnicodeString does not check for string length overflow...
CLEANSTART-2023-CR50278 incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4
Security vulnerability affects the chicken package. An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4...
CLSA-2026-1790604865 nettle: Fix of CVE-2021-3580
CVE-2021-3580: add input validation to RSA decrypt family and length check to pkcs1secdecrypt...
UBUNTU-CVE-2026-85532
Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CPU and memory consumption when processing crafted WS-Security messages. The fixes enforce a minimum key length of 16 bytes, a maximum leng...
CVE-2026-97954
A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. This vulnerability allows a network user to cause a Denial of Service DoS by corrupting TCP communication streams. On systems configured with memory page sizes larger than 8 KB, the kernel incorrectly calculates buffe...
CLSA-2026-1790730632 gstreamer1-plugins-base: Fix of 2 CVEs
CVE-2026-18297: opusdec: don't use channel positions for more than 64 channels, preventing an out-of-bounds write in gstopusdecnegotiate - CVE-2026-85150: rtsp/message: fix negative length passed to gstrndup when an auth param value starts with whitespace...
Rocky Linux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.6:CLSA-2026:1768480470)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768480470 advisory. - When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This...
Rocky Linux 8 [CIQ] Security Update: libX11 / libX11-common / libX11-debuginfo / libX11-debugsource / etc (crlsa-2021_4326)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214326 advisory. libX11: missing request length checks CVE-2021-31535 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...
AlmaLinux 9.2 [TuxCare] Security Update: libnghttp2 / libnghttp2-devel / nghttp2 (ALMALINUX9.2:CLSA-2026:1787754280)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787754280 advisory. - nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content- Length header and body onto reusab...
AlmaLinux 9.2 [TuxCare] Security Update: haproxy Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1736503350)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1736503350 advisory. - HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x befor...
ROS-20260930-73-0067
The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
SUSE CVE-2026-97546
In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...
CVE-2026-73257
A flaw was found in Mongoose. When processing incoming requests containing both Content-Length and Transfer-Encoding headers, the server accepts both headers instead of rejecting the malformed request. In environments where an upstream proxy processes request boundaries differently, a remote,...
EUVD-2026-71661
undici vulnerable to downstream response splitting via retry interceptor...
UBUNTU-CVE-2026-102558
A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...