361 matches found
CVE-2020-1350
CVE-2020-1350 SigRED Workaround to mitigate the impact of the vulnerability by reducing the TCP Recieve Packet Size Maximum Limit on the DNS Server and restarting DNS...
CVE-2020-1350-Fix
KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...
CVE-2026-116774
A flaw was found in russh. An authenticated remote client or a malicious server can cause a denial of service DoS by declaring a maximum packet size of zero during SSH channel negotiation. The affected system accepts this value, causing asynchronous write operations to hang indefinitely and...
kernel: Fix of 39 CVEs
nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...
CLSA-2026-1792158099 openssh: Fix of 4 CVEs
CVE-2026-106555: reset GSSAPI client state before each authentication attempt upstream 670510d1 - CVE-2026-106553: store delegated GSSAPI credentials only after successful authorization upstream 6f9cd19a - CVE-2026-106583: disallow '$' and '' in a command-line user name upstream 0c4c9a7b -...
Astra Linux - vulnerability in linux
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fixed global-out-of-bounds issue in tmcupdateetfbuffer Commit 6f755e85c332 “coresight: Added helper function for inserting synchronization packets” removed the trailing '\0' from the barrierpkt array and updat...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts Although we fixed a logic error in the commit referenced below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, resulting in an...
Astra Linux – vulnerability in linux-5.10, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: dsi: Prevent underflow when computing packet sizes Currently, the packet overhead is subtracted using unsigned arithmetic. With a short sync pulse, this could underflow and wrap around to near the maximal u16 value. Fi...
libssh2: Fix of 3 CVEs
CVE-2019-3860: bounds-check SFTP packet sizes in sftppacketrequire/v and sftpbin2attr - CVE-2019-3861: bounds-check paddinglength in libssh2transportread...
PT-2026-120355
Уязвимость программного обеспечения для пула соединения в PostgreSQL PgBouncer связана с целочисленным переполнением при обработке параметра max packet size. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...
AlmaLinux 9.2 [TuxCare] Security Update: dnsmasq / dnsmasq-utils (ALMALINUX9.2:CLSA-2025:1744628407)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744628407 advisory. - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DN...
CentOS Linux 7 [TuxCare] Security Update: dnsmasq / dnsmasq-utils (CENTOS7:CLSA-2024:1720179161)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1720179161 advisory. - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Fl...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2023-001151)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001151 advisory. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. Tenable h...
CVE-2026-62949
A flaw was found in AsyncSSH, a Python package for SSHv2 protocol implementation. A malicious SSH server or an authenticated client can exploit this vulnerability by sending a specially crafted SSH packet with a zero-sized maximum packet size. This can cause the AsyncSSH event loop to freeze,...
Astra Linux – Vulnerability in Erlang
Erlang is a programming language and runtime system designed for building massively scalable, soft-real-time systems with high availability requirements. OTP is a set of Erlang libraries, which includes the Erlang runtime system and several ready-to-use components written in Erlang. The packet si...
libssh: libssh: denial of service via zero advertised channel packet size
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...
libssh: libssh: denial of service via zero advertised channel packet size
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...
libssh: libssh: denial of service via zero advertised channel packet size
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...
