60 matches found
AZL-57339 CVE-2025-22868 affecting package packer for versions less than 1.9.5-6
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57315 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57324 CVE-2025-22868 affecting package vitess for versions less than 19.0.4-5
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57462 CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57309 CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
DEBIAN-CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57338 CVE-2025-22868 affecting package influxdb for versions less than 2.7.5-2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57410 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57449 CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57453 CVE-2025-22868 affecting package coredns for versions less than 1.11.1-14
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57389 CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57467 CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-13
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57306 CVE-2025-22868 affecting package kubernetes for versions less than 1.30.10-3
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57312 CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57356 CVE-2025-22868 affecting package containerized-data-importer for versions less than 1.57.0-13
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57335 CVE-2025-22868 affecting package prometheus for versions less than 2.45.4-10
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
UBUNTU-CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
CVE-2025-22868 is confirmed across connected feeds as a memory‑consumption DoS in token parsing caused by a malformed token in a Go oauth2/token path. The Astra Linux bulletin ties this to golang-golang-x-oauth2, and CBLMariner notes affected moby-engine versions below 25.0.3-11 with a patched re...
Input validation
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...
CVE-2020-36564 Improper input validation in github.com/justinas/nosurf
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...