358 matches found
fraud-bridge
Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...
CVE-2026-121629
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
UBUNTU-CVE-2026-121629
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
CVE-2026-121629
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
DEBIAN-CVE-2026-121629
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
EUVD-2026-119997
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
CVE-2026-121629
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
CVE-2026-121629
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
PT-2026-140386
Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A flaw exists in the adaptive streaming demuxers HLS, DASH, MSS where URIs referenced in a media playlist or manifest are fetched without restricting permitted URI schemes. An attacker...
CVE-2026-121629: Red Hat: A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS)
A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...
SUSE CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters used in power systems do not support segmentation offload when the MSS is less than 224 bytes. Attempting to send such packets causes the adapter to freeze,...
AZL-108581 CVE-2026-98556 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
DEBIAN-CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556 gve: DQO: reject TSO packets with an out of range MSS
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
CVE-2026-98556
The Linux kernel contains a vulnerability in the gve driver where TSO (TCP Segmentation Offload) packets with an out-of-range MSS (Maximum Segment Size) are not properly rejected. The gve_prep_tso() function fails to enforce the required limit of
CVE-2026-98556
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...
EUVD-2026-103601
In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gvepreptso notes that the device requires the MSS to be len and gsosegs, never gsosize. Such a packet reaches gvetxfilltsoctxdesc, which puts gsosize into the mss field of the...