Lucene search
+L

9101 matches found

Github Security Blog
Github Security Blog
•added 2026/06/05 3:31 a.m.•35 views

bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References8Affected Software1
osv_ghsa
osv_ghsa
•added 2026/06/05 3:31 a.m.•31 views

GHSA-2VRG-7RQV-PRF9 bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References7
NVD
NVD
•added 2026/06/05 2:17 a.m.•36 views

CVE-2026-11312

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS0.00112EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/06/05 2:14 a.m.•83 views

CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...

7.3CVSS0.00112EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/06/05 2:14 a.m.•30 views

CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...

7.3CVSS5.9AI score0.00112EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/06/05 1:39 a.m.•23 views

CVE-2026-7763 Heap buffer overflow in morse.ko TIM IE processing

A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio range to cause a Denial of Service kernel panic or potentially achieve Remote Code Execution via a...

5.9AI score0.00536EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/05 12:30 a.m.•21 views

CVE-2026-11312 bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/06/05 12:30 a.m.•18 views

CVE-2026-11312

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2026/06/05 12:30 a.m.•31 views

CVE-2026-11312 bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References8
CVE
CVE
•added 2026/06/05 12:30 a.m.•89 views

CVE-2026-11312

Bytedance InfiniStore vulnerable up to 0.2.33 via the purge_kv_map function in infinistore.h (KV Map Handler). Manipulation leads to inefficient algorithmic complexity. Attack requires local access; exploit publicly disclosed. No remediation details provided in the supplied documents.

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•53 views

PT-2026-46877

Name of the Vulnerable Software and Affected Versions bytedance InfiniStore versions prior to 0.2.34 Description An issue exists in the KV Map Handler component within the /src/infinistore.h library. A local attacker can perform a manipulation of the purge kv map function, resulting in inefficien...

4.8CVSS5.1AI score0.00112EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•33 views

InfiniStore security vulnerabilities

InfiniStore is a high-performance Key-Value cache storage tool open-sourced by Bytedance Inc. Versions of InfiniStore 0.2.33 and earlier contain security vulnerabilities, which stem from an algorithmic complexity issue in the purgekvmap function of the KV Map Handler component’s src/infinistore.h...

4.8CVSS5.4AI score0.00112EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•5 views

CVE-2026-11312: Inefficient Algorithmic Complexity

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS4.5AI score0.00112EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/06/04 10:13 p.m.•35 views

xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory...

9.1CVSS6AI score0.00489EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/04 4:15 p.m.•34 views

php: NULL pointer dereference in SOAP apache:Map decoder with missing <value>

A flaw was found in PHP. When a PHP SOAP server has a typemap configured, the apache:Map decoding process checks the incorrect variable in case of a missing value element. This incorrect check leads to a NULL pointer dereference and allows a remote unauthenticated attacker to crash the PHP SOAP...

7.5CVSS5.4AI score0.0078EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/06/04 11:29 a.m.•22 views

xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

7.8CVSS7.2AI score0.0038EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/04 11:29 a.m.•32 views

xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory...

9.1CVSS6AI score0.00489EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/04 11:15 a.m.•33 views

xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

7.8CVSS7.2AI score0.0038EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/04 11:15 a.m.•25 views

xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory...

9.1CVSS6AI score0.00489EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/04 11:15 a.m.•42 views

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

9.8CVSS7AI score0.00489EPSS
SaveExploits0References7
Rows per page
Query Builder