7692 matches found
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
ROS-20260921-73-0010
The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...
ROS-20260921-73-0015
The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2026-59168: Uncontrolled Recursion
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/jsonreader.go decodeValue, decodeObject, and decodeArray, and parsing/xml/reader.go parseElement, recurse once per input nesting level without a depth guard...
MiracleLinux 8 : perl-Net-DNS-1.15-2.el8_10 (AXSA:2026-1885:02)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1885:02 advisory. perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records CVE-2026-81928 Tenable has extracted the preceding description...
UBUNTU-CVE-2026-68914
Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not limit nesting depth when Cpanel::JSON::XS is unavailable or MOJONOJSONXS is enabled. An attacker who can supply untrusted JSON to decodejson, fromjson, or j can submit deeply nest...
SUSE SLED15 / SLES15 Security Update : perl-Net-DNS (SUSE-SU-2026:4086-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4086-1 advisory. This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in...
Moderate: apr-util security update
The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...
ROS-20260921-73-0014
The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2026-68914
Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not limit nesting depth when Cpanel::JSON::XS is unavailable or MOJONOJSONXS is enabled. An attacker who can supply untrusted JSON to decodejson, fromjson, or j can submit deeply nest...
CVE-2026-91863: Uncontrolled Recursion
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...
RHEL 10 : yggdrasil (RHSA-2026:69308)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69308 advisory. yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate chil...
MiracleLinux 9 : perl-Net-DNS-1.29-6.el9_8.1 (AXSA:2026-1884:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1884:01 advisory. perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records CVE-2026-81928 Tenable has extracted the preceding description...
SUSE SLES12 Security Update : perl-Net-DNS (SUSE-SU-2026:4065-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4065-1 advisory. This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when...
RockyLinux 9 : perl-Net-DNS (RLSA-2026:68786)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:68786 advisory. perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records CVE-2026-81928 Tenable has extracted the preceding description bloc...
ROS-20260921-73-0004
The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...