Lucene search
K

14 matches found

SUSE CVE
SUSE CVE
added 2026/06/09 2:27 a.m.8 views

SUSE CVE-2026-10725

Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory the "HTTP/2 bomb". The headersdecode method materialises a full key+value copy per indexe...

7.5CVSS5.7AI score0.00431EPSS
Exploits0References4
Amazon
Amazon
added 2026/05/26 12:0 a.m.14 views

Important: bind

Issue Overview: Fix GSS-API resource leak CVE-2026-3039 Limit resolver server list size CVE-2026-3592 An unauthenticated remote attacker can crash any affected named instance with a single crafted DNS message, causing denial of service. Both authoritative servers and resolvers are affected...

7.5CVSS5.8AI score0.00558EPSS
Exploits1
Snyk
Snyk
added 2026/05/18 8:33 p.m.10 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to insufficient validation in the MNG decoder. An attacker can cause excessive resource consumption by submitting specially crafted image files that bypass the intended list limit policy. Remediation A fix was...

7.5CVSS5.8AI score0.00403EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/05/18 8:33 p.m.24 views

ImageMagick: Policy Bypass in MNG coder could

Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

5.3CVSS5.8AI score0.00403EPSS
Exploits0References3Affected Software18
Positive Technologies
Positive Technologies
added 2026/05/18 12:0 a.m.13 views

PT-2026-41781

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing check in the MNG coder allows for reading more images than the list limit policy permits, which can lead to excessive resource consumption...

7.5CVSS5.8AI score0.01381EPSS
Exploits2References64
Tenable Nessus
Tenable Nessus
added 2026/04/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-23468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although...

5.5CVSS5.9AI score0.00123EPSS
Exploits0References3
OSV
OSV
added 2026/04/03 4:16 p.m.2 views

UBUNTU-CVE-2026-23468

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although the previous multiplication overflow check prevents out-of-bounds...

5.5CVSS5.9AI score0.00123EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/03 3:15 p.m.4 views

CVE-2026-23468

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although the previous multiplication overflow check prevents out-of-bounds...

5.9AI score0.00123EPSS
Exploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990286 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains...

5.5CVSS6.1AI score0.00248EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-38481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: Fail COMEDIINSNLIST ioctl if ninsns is too large The handling of the COMEDIINSNLIST ioctl allocates a kernel buffer to hold the array of struct...

5.5CVSS6.6AI score0.0015EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/21 8:47 p.m.7 views

CVE-2005-4735

IBM DB2 Universal Database UDB 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service application crash via 1 certain equality predicates that trigger self-removal, aka IY70808; and 2 a query with more than 32000 elements in the IN-list, aka LI70817...

6.8CVSS6.4AI score0.0155EPSS
Exploits1References1
OSV
OSV
added 2024/11/19 6:15 p.m.3 views

DEBIAN-CVE-2024-53055

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...

5.5CVSS5.6AI score0.00259EPSS
Exploits0References1
OSV
OSV
added 2024/07/30 8:15 a.m.4 views

DEBIAN-CVE-2024-42145

In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains received MAD packets in an unbounded list, poses a risk of uncontrolled growth. As user-space applications extract packets from this...

5.5CVSS5.6AI score0.00248EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/30 7:46 a.m.18 views

CVE-2024-42145 IB/core: Implement a limit on UMAD receive List

In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains received MAD packets in an unbounded list, poses a risk of uncontrolled growth. As user-space applications extract packets from this...

6.7AI score0.00248EPSS
Exploits0References8
Rows per page
Query Builder