334647 matches found
The vulnerability in the can/usb/mcba_usb.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the can/usb/mcbausb.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drivers/spi/spi-tegra20-slink.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/spi/spi-tegra20-slink.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service DoS f...
CVE-2026-56860
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
DEBIAN-CVE-2026-56860
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
Updated dhcpcd packages fix security vulnerabilities
Attackers can send a crafted DHCPv6 ADVERTISE message containing an IAPD IAPREFIX /0 with a valid OPTIONPDEXCLUDE using an exclude prefix length of /121 through /128 to trigger the out-of-bounds write and potentially corrupt adjacent stack memory CVE: CVE-2026-56114. Attackers can repeatedly send...
CVE-2026-56860
CVE-2026-56860 describes a performance-related fix in path resolution for relative paths containing .. segments. The prior approach performed string conversions and buffer rewrites at each step, yielding quadratic time complexity and high memory allocations. The fix now operates on a byte buffer ...
CVE-2026-56860
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
CVE-2026-56860 Avoid quadratic complexity in resolvePath in net/url
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
GO-2026-6218 Avoid quadratic complexity in resolvePath in net/url
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
Denial of Service (DoS)
Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Denial of Service DoS. Go Vulnerability Report:Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on...
Memory Allocation with Excessive Size Value
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the ES|QL query processing. An attacker can exhaust available heap memory and caus...
