io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams

A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...

io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams

A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...

EUVD-2026-117406

Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...

CVE-2026-100302

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

Security Bulletin: IBM Sterling Control Center is vulnerable to Guava Denial of Service (DoS) via Unthrottled Memory Allocation During Java Deserialization (CVE-2026-102554)

Summary A high-severity vulnerability in Google Guava versions 4.0 through 33.7.1 allows attackers to trigger a Denial of Service DoS through specially crafted Java serialized objects. This can cause excessive memory consumption, resulting in an OutOfMemoryError and application crash. The issue i...

CVE-2026-100302 Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302

The Apache ZooKeeper multiRead request handler in version 3.7.0 through 3.9.6 is vulnerable to a denial of service (DoS) due to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. The multiRead handler does not limit the number of bundled read operations or the cumulative resp...

EUVD-2026-116870

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302: Apache Software Foundation Apache ZooKeeper: Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a…

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

PT-2026-136924

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

Security Bulletin: IBM WebSphere Application Server is affected by a Deserialization of Untrusted Data vulnerability due to Google Guava (CVE-2026-102554)

Summary There is a vulnerability in the Google Guava library that affects IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2026-102554 DESCRIPTION: Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through...

Security Bulletin: IBM Terracotta is affected by snappy-java vulnerabilities that could allow attackers to crash the application, cause a denial of service, or expose or tamper with decompressed data

Summary IBM Terracotta uses the snappy-java library for fast data compression and decompression. Vulnerability Details CVEID:CVE-2026-108104 DESCRIPTION: Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers...

Security update for guava, j2objc-annotations

This update for guava, j2objc-annotations fixes the following issue: CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError bsc1284985. Changes for guava: Upgrade to...

SUSE-SU-2026:5061-1 Security update for guava, j2objc-annotations

This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError bsc1284985. Changes for guava: - Upgrade to...

SUSE CVE-2026-119276

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when CLIENTSESSIONTRACK was negotiated, the OkPacket.parse and OkPacket.parseWithInfo paths allocated byte arrays using server-declared lengths for the ...

CVE-2026-119276

A flaw was found in MariaDB Connector/J. When processing database response packets, the driver allocates memory based on server-declared lengths before verifying that sufficient data remains in the packet. A malicious database server or an attacker positioned in the middle of network communicatio...

CVE-2026-110747

ProtobufParser.readStringKey reads the length prefix of a protobuf map entry's string key into an attacker-controlled int and then checks inputPtr + len = inputEnd using signed arithmetic. For values near Integer.MAXVALUE the addition overflows to a negative value and the check passes even when t...

CVE-2026-104016

ProtobufParser parses length-prefixed protobuf string and bytes fields by checking inputPtr + len = inputEnd and then, on the fast path, calling finishShortTextlen. Both use 32-bit signed integer arithmetic. When an attacker supplies a varint decoding to a length near Integer.MAXVALUE, inputPtr +...

TomcatKiller-CVE-2025-31650

TomcatKiller-CVE-2025-31650 A tool designed to detect the vulnerability CVE-2025-31650 in Apache Tomcat versions 10.1.10 to 10.1.39 This vulnerability allows an attacker to trigger a memory leak by sending specially crafted HTTP/2 requests with invalid priority headers, leading to a...

MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets

Summary MariaDB Connector/J sized heap allocations from lengths declared by the server in OK packets before checking that those lengths fit in the packet. A rogue or MitM server can make the client allocate megabytes from a packet of a few bytes. Details When CLIENTSESSIONTRACK is negotiated the...