Resource exhaustion in socket.io-parser

The socket.io-parser npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service memory consumption via a large packet because a concatenation approach is used...

GHSA-XFHH-G9F5-X4M4 Resource exhaustion in socket.io-parser

The socket.io-parser npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service memory consumption via a large packet because a concatenation approach is used...

go-toolset:rhel8 bug fix and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Bug Fixes and Enhancements: Rebase go-toolset to 1.15.13 BZ1967698 Memory consumption containermemoryrss steadily growing for /system.slice/kubelet.service when FIPS enabled BZ1969700...

go-toolset:rhel8 bug fix and enhancement update

An update is available for delve, golang, go-toolset. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming language tools and...

SUSE SLES11 Security Update : OpenEXR (SUSE-SU-2021:14757-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14757-1 advisory. - Fixed CVE-2021-3479 bsc1184354: Out-of-memory caused by allocation of a very large buffer - Fixed CVE-2021-3605 bsc1187395: Heap...

EulerOS 2.0 SP8 : binutils (EulerOS-SA-2021-1976)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with...

CVE-2021-35041

The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format and cannot be decoded by the node correctly. As a result, the node may consume the memory...

Format string

The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format and cannot be decoded by the node correctly. As a result, the node may consume the memory...

MGASA-2021-0270 Updated qtwebsockets5 packages fix a security vulnerability

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service memory consumption CVE-2018-21035...

Updated qtwebsockets5 packages fix a security vulnerability

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service memory consumption CVE-2018-21035...

OPENSUSE-SU-2021:0885-1 Security update for libopenmpt

This update for libopenmpt fixes the following issues: Various bugfix and stability issues were fixed, some of those might have security impact. libopenmpt was updated to 0.3.28: Fixed excessive memory consumption with malformed files in various formats. Changes in 0.3.27: AMS: Avoid allocating...

PT-2021-27350

Name of the Vulnerable Software and Affected Versions: libopenmpt versions prior to 0.3.28 Description: The issue concerns various bugfix and stability issues in libopenmpt, some of which might have security impact. The update fixes excessive memory consumption with malformed files in various...

Security update for libopenmpt (moderate)

openSUSE Security Update: Security update for libopenmpt Announcement ID: openSUSE-SU-2021:0885-1 Rating: moderate References: 1186663 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for libopenmpt fixes the following...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to excessive memory consumption in MS-WSP dissector...

SUSE: Security Advisory (SUSE-SU-2021:1914-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-15383

CVE-2020-15383 affects Brocade Fabric OS firmware where running security scans can cause memory exhaustion in the config and secnotify processes, leading to denial of service and potential switch panic. Affected firmware versions include before v9.0.0, v8.2.2d, and v8.2.1e. The issue is described...

CVE-2020-15383

Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic...

SUSE-SU-2021:1914-1 Security update for libopenmpt

This update for libopenmpt fixes the following issues: Various bugfix and stability issues were fixed, some of those might have security impact. libopenmpt was updated to 0.3.28: Fixed excessive memory consumption with malformed files in various formats. Changes in 0.3.27: AMS: Avoid allocating...

PT-2021-28437

Name of the Vulnerable Software and Affected Versions: libopenmpt versions prior to 0.3.28 Description: The issue concerns various bugfix and stability issues in libopenmpt, some of which might have security implications. These issues include excessive memory consumption with malformed files in...

Ubuntu 18.04 LTS : rpcbind vulnerability (USN-4986-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4986-1 advisory. It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading...