go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission

A flaw was found in the OpenTelemetry-Go BatchingProcessor component. A remote attacker can exploit this by sending a high volume of log emissions, which can fill the asynchronous export buffer. This causes the processor to enter a tight CPU loop, repeatedly retrying to export logs without proper...

unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...

unbound: Unbound: Denial of Service via 'serve-expired' code path bypass

A vulnerability in Unbound's serve-expired code path allows a remote attacker to bypass pending-query limits using specially crafted DNS queries. By causing a security counter to double-decrement, the attacker can hold an arbitrary number of pending queries from a single source, resulting in a...

unbound: Unbound: ZONEMD verification bypass due to asynchronous DNSSEC resolution

A vulnerability in Unbound allows tampered DNS records in ZONEMD-configured zones below a trust anchor to be served or saved before integrity checks complete. Asynchronous DS/DNSKEY resolution creates a time window where unverified data is processed. If this compromised data is written to disk, i...

unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis

A flaw was found in Unbound. Improper handling of buffer positions and compression pointers in Unbound's CNAME synthesis allows a remote attacker to corrupt heap memory via upstream DNS responses. This vulnerability can result in a denial of service DoS or, under specific conditions, remote code...

unbound: Unbound: Heap buffer overflow via malicious DNSSEC response

A flaw was found in Unbound. This vulnerability allows a remote attacker to cause a heap buffer overflow during the processing of DNSSEC responses. By sending a specially crafted DNSSEC response, a malicious server or an attacker tampering with network traffic can trigger this flaw. This could le...

unbound: Unbound: Denial of Service via algorithmic complexity attacks on DNSSEC

A flaw was found in Unbound. This vulnerability, termed 'ReTrap', allows a remote attacker to launch algorithmic complexity attacks on the Domain Name System Security Extensions DNSSEC validation process. By serving malicious zones or responses, an attacker can exploit various mechanisms, such as...

unbound: Unbound: Denial of Service via continuous queries on TCP/DoT connection

A flaw was found in Unbound. A malicious actor can exploit a vulnerability in the TCP/DoT reading procedure, which lacks a limit on consecutive reads. By continuously streaming distinct uncached names over a TCP/DoT connection, an attacker can monopolize a worker's event loop. This can lead to a...

unbound: Unbound: Denial of Service via use-after-free in DoQ stream output buffer

A flaw was found in Unbound. This vulnerability occurs in the DNS-over-QUIC DoQ stream output buffer when a client sends a RESETSTREAM, causing the output buffer to be freed while retransmission entries still point to it. A remote attacker, by querying Unbound over DoQ, withholding acknowledgment...

unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup

A use-after-free vulnerability in Unbound's DNS-over-HTTPS DoH stream cleanup code allows a remote attacker to cause a denial of service DoS. When DoH support is compiled, sending a specially crafted DoH connection under specific failure conditions—such as an RPZ drop query or heavy traffic—cause...

corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

CVE-2026-92162

GHSA-v2gw-v9h5-9q4x...

GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-53668 vulnerabilities

Vulnerabilities for packages: keycloak...

kernel: ipvlan: Make the addrs_lock be per port

A race condition vulnerability was found in the Linux kernel's ipvlan driver. The per-device addrslock was incorrectly used instead of a per-port lock, and some code paths ipvlanopen/ipvlanclose failed to acquire the lock entirely. For IPv6 address changes that don't require RTNL lock, concurrent...

kernel: ipv6: prevent possible UaF in addrconf_permanent_addr()

A flaw was found in the Linux kernel's IPv6 networking subsystem. Specifically, a Use-after-Free UaF vulnerability exists within the addrconfpermanentaddr function. This issue arises when the system attempts to access an IPv6 address after it has been freed, which could allow an attacker to cause...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...