Lucene search
K

9 matches found

CVE
CVE
added 2026/05/25 2:0 p.m.10 views

CVE-2026-47073

CVE-2026-47073 affects hackney WebSocket client (src/hackney_ws.erl) causing unbounded memory growth via three paths: read_handshake_response/3 accumulates an unbounded buffer due to lack of size cap; parse_payload/9 and parse_active_payload/8 do not enforce a maximum frame payload length; and fr...

8.7CVSS5.9AI score0.00153EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.11 views

RHCOS 3 : OpenShift Container Platform 3.11 (RHSA-2019:2817)

The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2817 advisory. - HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9512 - HTTP/2: flood using HEADERS frames results in...

7.8CVSS7.1AI score0.50822EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.8 views

RHCOS 3 : OpenShift Container Platform 3.9 (RHSA-2019:2769)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2769 advisory. - HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9512 - HTTP/2: flood using HEADERS frames results in...

8.1CVSS7AI score0.50822EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2025/12/01 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-66019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory...

8.7CVSS5.7AI score0.00076EPSS
Exploits0References2
OSV
OSV
added 2023/02/10 9:4 a.m.17 views

SUSE-SU-2023:0341-1 Security update for bind

This update for bind fixes the following issues: - Updated to version 9.16.37 jscSLE-24600: - CVE-2022-3094: Fixed an issue where a message flood could exhaust all available memory bsc1207471. - CVE-2022-3736: Fixed a potential crash upon receiving an RRSIG in configurations with stale cache and...

7.5CVSS7.5AI score0.0283EPSS
Exploits0References7
NVD
NVD
added 2022/06/20 6:15 a.m.9 views

CVE-2021-45918

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...

7.8CVSS0.00679EPSS
Exploits0References1
CVE
CVE
added 2022/06/20 5:30 a.m.58 views

CVE-2021-45918

CVE-2021-45918 affects NHI’s health insurance web service component, where insufficient validation of input string length can cause a heap-based buffer overflow. The vulnerability is exploitable remotely over a network with no authentication and low attack complexity, potentially flooding the pro...

7.8CVSS7.7AI score0.00679EPSS
Exploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2020/07/29 6:21 a.m.4 views

HTTP/2: flood using HEADERS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RSTSTREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

7.8CVSS7.1AI score0.09322EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2020/06/15 4:17 p.m.5 views

HTTP/2: flood using HEADERS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RSTSTREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

7.8CVSS7.1AI score0.09322EPSS
Exploits0References9
Rows per page
Query Builder