CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

安全公告：facil.io MIME 解析器中的无限循环拒绝服务（部分边界） 分配的 CVE ID ：CVE-2026-66730 产品： facil.io 受影响版本： facil.io = 0.6.0（所有 0.6.x、所有 0.7.x、master）；该问题在 0.6.0 中与 MIME 解析器一同引入 组件： lib/facil/http/http.c、lib/facil/http/parsers/httpmimeparser.h CWE： CWE-835（具有不可达退出条件的循环）、CWE-400（未受控的资源消耗） CVSS v3.1： 7.5...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

安全披露：facil.io MIME 解析器中的越界读取导致服务器崩溃 指定 CVE ID CVE-2026-66729 产品： facil.io 受影响版本： facil.io = 0.6.0（所有 0.6.x、所有 0.7.x、master）；该问题随 0.6.0 中新增的 MIME 解析器引入 组件： lib/facil/http/parsers/httpmimeparser.h CWE： CWE-191（整数下溢）、CWE-125（越界读取） CVSS v3.1： 7.5（AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H） 研究人员： Theodosis...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...

CVE-2026-66729 facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32t wraparound ...

EUVD-2026-49358

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32t wraparound ...

CVE-2026-66729

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32t wraparound ...

OESA-2025-2346 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...

OESA-2025-2344 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...

Linux Distros Unpatched Vulnerability : CVE-2021-22902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The actionpack ruby gem a framework for handling and responding to web requests in Rails before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service...

Denial Of Service (DoS)

rack is vulnerable to Denial Of Service DoS. The vulnerability exists in the library's multipart MIME parser because it does not properly limit the total number of parts that can be uploaded, which allows an attacker to send maliciously crafted requests and crash the application...

SUSE CVE-2021-22902

The actionpack ruby gem a framework for handling and responding to web requests in Rails before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch t...

Regular Expression Denial Of Service (ReDoS)

rack is vulnerable to regular expression denial of service. The vulnerability exists because the BROKENQUOTED and BROKENUNQUOTED attributes in the Multipart module of multipart.rb does not properly restrict the broken mime parser, allowing an attacker to crash the application by providing malicio...

Wireshark MIME Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software from the Wireshark team. A security vulnerability in the processing of messages by the Wireshark MIME parser can be exploited by a remote attacker to submit a special request that can crash an application...

Denial Of Service (DoS) Through Memory Exhaustion

emailjs-mime-parser is vulnerable to denial of serviceDOS attacks. Lack of necessary validations in mimeparser.js allows an attacker to send an unlimited number of MimeNode objects causing the system to take a disproportionate amount of time to process, resulting in an application crash...

Mandriva Update for openssl MDVSA-2012:060 (openssl)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Current Versions Release History

Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...