7054 matches found
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Node.js jose module
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Node.js jose module Vulnerability Details CVEID:CVE-2024-28176 DESCRIPTION: Node.js jose module is vulnerable to a denial of service, caused by a flaw during JWE Decryption operations. By sending a specially crafted reques...
AZL-57389 CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
DEBIAN-CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57450 CVE-2025-22868 affecting package blobfuse2 for versions less than 2.1.2-8
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2022-49052
In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONEVM cloning, user process can be corrupted by seeing zeroed page unexpectedly. CPU A CPU B doswappage doswappage SWPSYNCHRONOUSIO path SWPSYNCHRONOUSIO...
CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868 Unexpected memory consumption during token parsing in golang.org/x/oauth2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868 Unexpected memory consumption during token parsing in golang.org/x/oauth2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
A vulnerability exists in the golang.org/x/oauth2/jws component, where an attacker can provide a maliciously malformed token that leads to unexpected memory consumption during the parsing process. This issue affects several products, including cri-tools , docker-stable , and opentelemetry-collect...
GO-2025-3488 Unexpected memory consumption during token parsing in golang.org/x/oauth2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2022-49052 mm: fix unexpected zeroed page mapping with zram swap
In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONEVM cloning, user process can be corrupted by seeing zeroed page unexpectedly. CPU A CPU B doswappage doswappage SWPSYNCHRONOUSIO path SWPSYNCHRONOUSIO...
CVE-2022-49052
In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONEVM cloning, user process can be corrupted by seeing zeroed page unexpectedly. CPU A CPU B doswappage doswappage SWPSYNCHRONOUSIO path SWPSYNCHRONOUSIO...
CVE-2022-49052 mm: fix unexpected zeroed page mapping with zram swap
In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONEVM cloning, user process can be corrupted by seeing zeroed page unexpectedly. CPU A CPU B doswappage doswappage SWPSYNCHRONOUSIO path SWPSYNCHRONOUSIO...
CVE-2022-49052
Summary (CVE-2022-49052) : The Linux kernel memory management path mm/page_io.c with zram swap could expose zeroed data to a process during CLONE_VM cloning, leading to potential data corruption. The root cause was the bogus swap_slot_free_notify in the CLONE_VM scenario, which didn’t correctly t...
CVE-2025-22868: Improper Validation of Syntactic Correctness of Input
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
Google Go 安全漏洞
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from unexpected memory consumption when parsing malicious malformed tokens...
PT-2025-8665
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An issue exists where an attacker can pass a malicious malformed token, causing unexpected memory consumption during parsing. Recommendations At the moment, there is no information about a new...