AZL-57324 CVE-2025-22868 affecting package vitess for versions less than 19.0.4-5

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57344 CVE-2025-22868 affecting package keda for versions less than 2.14.1-3

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57462 CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57339 CVE-2025-22868 affecting package packer for versions less than 1.9.5-6

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57338 CVE-2025-22868 affecting package influxdb for versions less than 2.7.5-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57449 CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57453 CVE-2025-22868 affecting package coredns for versions less than 1.11.1-14

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57410 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57309 CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

DEBIAN-CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57335 CVE-2025-22868 affecting package prometheus for versions less than 2.45.4-10

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57467 CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-13

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57389 CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57356 CVE-2025-22868 affecting package containerized-data-importer for versions less than 1.57.0-13

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57312 CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57306 CVE-2025-22868 affecting package kubernetes for versions less than 1.30.10-3

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

UBUNTU-CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CVE-2025-22868

CVE-2025-22868 is confirmed across connected feeds as a memory‑consumption DoS in token parsing caused by a malformed token in a Go oauth2/token path. The Astra Linux bulletin ties this to golang-golang-x-oauth2, and CBLMariner notes affected moby-engine versions below 25.0.3-11 with a patched re...

Google Go 安全漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from unexpected memory consumption when parsing malicious malformed tokens...

CVE-2024-53879

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service...