309 matches found
Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: Security fixes in August 2026 release bsc1274774 Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2026:4762-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in August 2026 release bsc1274774...
aiohttp: Multiple instances of excessive or unbounded memory/CPU use
Summary Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumption on attacker controlled requests. Impact An attacker could cause resource exhaustion through specially crafted requests...
CVE-2026-110927
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection...
UBUNTU-CVE-2026-110927
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection...
Astra Linux – Vulnerability in binutils
It has been discovered that GNU Binutils prior to version 2.40 contains a vulnerability involving excessive memory consumption, caused by the loadseparatedebugfiles function in dwarf2.c. An attacker could provide a crafted ELF file and trigger a DNS attack...
CVE-2026-110927
Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585...
CVE-2026-110927
...
EUVD-2026-102055
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection...
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
SummaryApplications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page; provider-native web fetching is not affected. DetailsNested block elements cause HTML-to-Markdown conversion t...
Linux Distros Unpatched Vulnerability : CVE-2026-110927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop do...
CVE-2026-110927: Allocation of Resources Without Limits or Throttling
Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585...
CVE-2026-73130
Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can...
CVE-2026-73130 Gitea repository initialization resource exhaustion
Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can...
CVE-2026-73130
Gitea versions
CVE-2026-73130 Gitea repository initialization resource exhaustion
Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can...
CVE-2026-73130
Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can...
CVE-2026-73130: Uncontrolled Resource Consumption
Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can...
openssh: openssh: a compressed payload can expand past the maximum packet size
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection...