15221 matches found
Guest can panic host through filesystem timestamp before the epoch on wasip3
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mr2v-56j5-cmfc For more information see the GitHub-hosted security advisory...
Wasmtime wasi:http implementation panics with a zero timeout supplied
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w4qr-p94g-mjhv For more information see the GitHub-hosted security advisory...
CVE-2026-104428 Zebra before 11.0.0 Denial of Service via getblock Verbosity 2
The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations sentinel is converted to u32 with .expect, aborting the process. Remote unauthenticated attackers, directly or through...
CLEANSTART-2026-ZV78301 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Security vulnerability affects the consul package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
CLEANSTART-2026-AG71066 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
Security vulnerability affects the consul package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
CLEANSTART-2026-DB84744 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs
Security vulnerability affects the consul package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
CLEANSTART-2026-CT85138 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate
Security vulnerability affects the consul package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...
CLEANSTART-2026-SE64937 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
PT-2026-104239
Name of the Vulnerable Software and Affected Versions zebra-rpc versions prior to 11.0.0 Description The getblock RPC method in the Zebra node panics when verbosity is set to 2 for a side-chain block. This occurs because the block's -1 confirmations sentinel is converted to a u32 type using the...
SUSE SLES15 Security Update : wicked2nm (SUSE-SU-2026:4405-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4405-1 advisory. This update for wicked2nm fixes the following issue: - serdewith: KeyValueMap serialization panics on empty sequence or map entries...
GO-2026-6548 Dasel: Selector lexer panics on trailing whitespace in `parseCurRune` in github.com/tomwright/dasel
Dasel: Selector lexer panics on trailing whitespace in parseCurRune in github.com/tomwright/dasel...
K000163508: Linux kernel vulnerability CVE-2026-53392
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzallocobjs, and...
CLEANSTART-2026-PN99410 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Security vulnerability affects the cri-tools package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
CLEANSTART-2026-NJ60272 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
Security vulnerability affects the cri-tools package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...
CLEANSTART-2026-RI58790 Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method
Security vulnerability affects the cri-tools package. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method...
CLEANSTART-2026-RR70379 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
CVE-2026-39836 affects multiple packages. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0. See references for individual vulnerability details...
CLEANSTART-2026-TV66074 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs
Security vulnerability affects the kube-state-metrics-fips package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
CLEANSTART-2026-GM89854 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate
Security vulnerability affects the kube-state-metrics-fips package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...
CLEANSTART-2026-SU70558 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Security vulnerability affects the kube-state-metrics-fips package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...