Lucene search
+L

21 matches found

osv-azl
osv-azl
•added 2026/10/08 11:17 p.m.•4 views

AZL-107514 CVE-2026-78659 affecting package ignition-flatcar 2.22.0-6

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

7.5CVSS6AI score0.0057EPSS
SaveExploits0References1
osv-azl
osv-azl
•added 2026/10/08 11:17 p.m.•8 views

AZL-107255 CVE-2026-78659 affecting package containerized-data-importer 1.62.0-8

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

7.5CVSS6AI score0.0057EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•1 views

CVE-2026-78659: Asymmetric Resource Consumption (Amplification)

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

7.5CVSS6AI score0.0057EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 3:32 p.m.•15 views

EUVD-2026-89005

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

6.2AI score0.00462EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•7 views

PT-2026-79923

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

5.9CVSS6AI score0.0055EPSS
SaveExploits0References6
osv-debian
osv-debian
•added 2026/07/23 8:17 p.m.•25 views

DEBIAN-CVE-2026-25800

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...

7.5CVSS6AI score0.00841EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2026/07/23 8:17 p.m.•16 views

UBUNTU-CVE-2026-25800

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...

7.5CVSS6AI score0.00841EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/23 7:09 p.m.•21 views

EUVD-2026-48374

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...

7.5CVSS6AI score0.00841EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/23 7:09 p.m.•29 views

CVE-2026-25800

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...

7.5CVSS6AI score0.00841EPSS
SaveExploits0
osv-suse
osv-suse
•added 2026/02/27 11:53 a.m.•11 views

SUSE-SU-2026:0685-1 Security update for valkey

This update for valkey fixes the following issues: Update to version 8.0.7. Security issues fixed: - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts bsc1258746. - CVE-2026-21863: denial of service via invalid clusterbus packet bsc1258788...

8.5CVSS7.3AI score0.00793EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
•added 2026/02/27 11:53 a.m.•24 views

Security update for valkey

This update for valkey fixes the following issues: Update to version 8.0.7. Security issues fixed: CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts bsc1258746. CVE-2026-21863: denial of service via invalid clusterbus packet bsc1258788. Other...

6.8CVSS7.1AI score0.00793EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-44897

Malicious code in bioql PyPI...

7.5CVSS7.2AI score0.01241EPSS
SaveExploits0References6
Fedora
Fedora
•added 2025/04/11 6:32 p.m.•51 views

[SECURITY] Fedora 42 Update: upx-5.0.0-1.fc42

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

5.5CVSS7AI score0.00298EPSS
SaveExploits1
Fedora
Fedora
•added 2025/04/06 1:16 a.m.•48 views

[SECURITY] Fedora 40 Update: upx-5.0.0-1.fc40

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

5.5CVSS4.1AI score0.00298EPSS
SaveExploits1
Fedora
Fedora
•added 2023/01/22 1:52 a.m.•50 views

[SECURITY] Fedora 36 Update: upx-4.0.1-2.fc36

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

5.5CVSS6AI score0.00387EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•32 views

Fedora: Security Advisory for golang-github-containerd-ttrpc (FEDORA-2021-eb2742b148)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5CVSS6.5AI score0.02241EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/20 12:00 a.m.•39 views

Fedora: Security Advisory for upx (FEDORA-2021-acfb7be76e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3CVSS6.7AI score0.00751EPSS
SaveExploits1References2
Fedora
Fedora
•added 2021/03/19 8:32 p.m.•66 views

[SECURITY] Fedora 34 Update: upx-3.96-8.fc34

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

8.3CVSS4.8AI score0.00751EPSS
SaveExploits1
Fedora
Fedora
•added 2021/03/19 6:53 p.m.•50 views

[SECURITY] Fedora 32 Update: upx-3.96-8.fc32

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

8.3CVSS4.8AI score0.00751EPSS
SaveExploits1
Fedora
Fedora
•added 2019/08/11 1:14 a.m.•52 views

[SECURITY] Fedora 30 Update: upx-3.95-4.fc30

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

7.8CVSS4.8AI score0.01803EPSS
SaveExploits2
Rows per page
Query Builder