LOYTEC L-IP BACnet/IP Routers Unchecked Input for Loop Condition (CVE-2026-55731)

The SNMP agent of a LOYTEC L-IP BACnet/IP router does not bound the loop condition it derives from an SNMP GETNEXT request's OID. An unauthenticated remote attacker can send a crafted GETNEXT request containing an oversized OID component to drive the agent into a long-running loop, exhausting CPU...

ROS-20260907-73-0014

The vulnerability in libssh relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-89676

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.6.2 through 6.0.7 Description An infinite loop occurs during PKCS5 decryption, which is a standard for password-based encryption. Recommendations Update strongSwan versions 4.6.2 through 6.0.7 to a newer version that...

CVE-2026-86250 h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie and deleteChunkedCookie functions. Attackers can send a crafted cookie header with an extremely large chunk count to trigger an On² cleanup loop that hangs the server...

CVE-2026-86250

h3 versions before 2.0.1-rc.18 contain a denial-of-service vulnerability in the setChunkedCookie() and deleteChunkedCookie() functions. The library fails to validate the chunk count parsed from user-controlled cookie values, allowing a remote, unauthenticated attacker to send a crafted cookie hea...

EUVD-2026-72106

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie and deleteChunkedCookie functions. Attackers can send a crafted cookie header with an extremely large chunk count to trigger an On² cleanup loop that hangs the server...

CVE-2026-86250 h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie and deleteChunkedCookie functions. Attackers can send a crafted cookie header with an extremely large chunk count to trigger an On² cleanup loop that hangs the server...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: etcd (UTSA-2022-001270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001270 advisory. In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-053361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053361 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and...

CVE-2026-86250: Uncontrolled Resource Consumption

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie and deleteChunkedCookie functions. Attackers can send a crafted cookie header with an extremely large chunk count to trigger an On² cleanup loop that hangs the server...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053367 advisory. In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a lo...

ALPINE-CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

AZL-99747 CVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

AZL-99924 CVE-2026-6554 affecting package nmap 7.95-5

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554

libpcap versions before 1.10.7 contain an infinite loop vulnerability in its BPF interpreter . The 'ja L' instruction uses a signed offset to implement backward-jump loops, but the interpreter does not cap the number of loop iterations. In particular uncommon use cases, a crafted filter program c...

EUVD-2026-72019

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554 infinte loop in libpcap before 1.10.7

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554 infinte loop in libpcap before 1.10.7

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...