333842 matches found
SUSE CVE-2026-74570
In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfsrlrealloc and ntfsrlreallocnofail...
SUSE CVE-2026-74576
In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b "mm/slab: avoid allocating slabobjext array from its own slab" avoided recursive allocation of objexts from kmalloc caches of the same...
CVE-2026-74767
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767
Pandora has a DoS in DAA extraction: unbounded decompression of DAA chunks caused memory and CPU exhaustion. The fix uses bounded decompression (decompressobj().decompress()) with max_extracted_filesize, checks cumulative decompressed size, and raises a ZipBomb when the limit is exceeded, abortin...
CVE-2026-74767
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
MINI-52JX-Q7R3-QF5W
Bulletin has no description...
MINI-WMQP-F989-FWV7
Bulletin has no description...
MINI-43RQ-8CCJ-687V
Bulletin has no description...
MINI-G9H6-4CQV-CVGW
Bulletin has no description...
MINI-XM4P-GQPC-59GR
Bulletin has no description...
MINI-G249-GVQ8-W47X
Bulletin has no description...
MINI-5354-5525-CH8P
Bulletin has no description...
MINI-CMP3-2CWC-6JRW
Bulletin has no description...
MINI-PPQR-Q89F-PR76
Bulletin has no description...
MINI-C6VV-GH7P-MVC4
Bulletin has no description...
MINI-R57G-QGC5-5672
Bulletin has no description...