18402 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-38709
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device block size is changed underneath a mounted filesystem...
Linux Distros Unpatched Vulnerability : CVE-2025-38727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlinkunicast netlinkattachskb checks for the...
Improper Resource Shutdown or Release
Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...
Improper Resource Shutdown or Release
Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...
Improper Resource Shutdown or Release
Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...
CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side
fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...
CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side
fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...
GHSA-RRW2-PX9J-QFFJ FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side
Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...
FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side
Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...
MAL-2025-43875 Malicious code in commitlint-query-loop-gulp (npm)
The package commitlint-query-loop-gulp was found to contain malicious code...
Malicious code in commitlint-query-loop-gulp (npm)
The package commitlint-query-loop-gulp was found to contain malicious code...
MAL-2025-45062 Malicious code in loop-link-boson-technocracy (npm)
The package loop-link-boson-technocracy was found to contain malicious code...
MAL-2025-45063 Malicious code in loop-yakutsk-eslint-async (npm)
The package loop-yakutsk-eslint-async was found to contain malicious code...
MAL-2025-45528 Malicious code in pavo-nashira-commitlint-loop (npm)
The package pavo-nashira-commitlint-loop was found to contain malicious code...
Malicious code in loop-link-boson-technocracy (npm)
The package loop-link-boson-technocracy was found to contain malicious code...
MAL-2025-45061 Malicious code in loop-ichnology-nashira-accretion (npm)
The package loop-ichnology-nashira-accretion was found to contain malicious code...
Malicious code in loop-yakutsk-eslint-async (npm)
The package loop-yakutsk-eslint-async was found to contain malicious code...
MAL-2025-45545 Malicious code in petrology-loop-ganymede-transform (npm)
The package petrology-loop-ganymede-transform was found to contain malicious code...