331791 matches found
CVE-2026-71218 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion
A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...
CVE-2026-71218 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion
A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...
CVE-2026-71218
A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...
CVE-2026-68419
A flaw was found in the Linux kernel's RDMA/irdma component. A local user could exploit this by attempting to re-register specific memory regions Queue Pair, Completion Queue, or Shared Receive Queue objects that are not intended for re-registration. This could lead to an invalid operation being...
CVE-2026-68355
A flaw was found in the ath11k component of the Linux kernel. When processing Wi-Fi wireless fidelity data, a specific function can attempt to access memory outside of its allocated buffer. This buffer underflow occurs if the first entry in a data structure has a zero buffer address, leading to a...
CVE-2026-68315
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. When processing a Stream Reset Incoming Request RESETINREQUEST from a peer, the kernel does not properly validate the stream count. This can lead to an integer overflow when calculating the size for t...
CVE-2026-73152
A flaw was found in svxlink's EchoLink proxy implementation. An integer truncation in message-length handling can result in incorrect buffer sizes, leading to potential memory corruption when processing specially crafted proxy messages. Mitigation Update svxlink to version 26.05.1 or later...
CVE-2026-73145
A flaw was found in svxlink's asynchronous HTTP server. No limits are enforced on incoming HTTP request-line or header sizes. A remote attacker can send excessively large requests to exhaust available memory, resulting in a denial of service. Mitigation Update svxlink to version 26.05.1 or later...
CVE-2026-73144
A flaw was found in svxlink's FRN module. A server-supplied list item count is accepted without validation, allowing a malicious server to trigger unbounded memory allocation. This can lead to memory exhaustion and a denial of service. Mitigation Update svxlink to version 26.05.1 or later...
CVE-2026-73142
A flaw was found in svxlink's remotetrx NetUplink component. When a server initiates a disconnect, the associated connection object is not properly freed, causing a memory leak. A remote attacker can repeatedly trigger disconnects to cause unbounded memory growth, leading to a denial of service...
EUVD-2026-55989
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
CVE-2026-15565 Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...
EUVD-2026-55988
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...
CVE-2026-15565
CVE-2026-15565 affects Undertow: a flaw enables a remote attacker to cause Out of Memory on a websockets endpoint without authentication for any @ServerEndpoint class that has an @OnMessage method, resulting in Denial of Service. The issue impacts the availability of the service (CVSS v3.1: AV:N/...
CVE-2026-15565
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
CVE-2026-15565
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...
CVE-2026-15561 Undertow-core: oom via missing limits in chunked trailer in eap's undertow
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...
