org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

ROS-20260922-73-0094

The vulnerability of the neighxmit function in the net/core/neighbour.c module, which is part of Linux’s kernel-based networking functions, involves a flaw where resources are not released after their useful life has ended. Exploiting this vulnerability allows an attacker to cause service failure...

PT-2026-96816

Name of the Vulnerable Software and Affected Versions rpcbind affected versions not specified Description A flaw in rpcbind allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The service records previously unseen RPC Remote...

HPESBNW05151 rev.1 - Remote DoS in remote Telco service Orchestrator

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator 5.6.0 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-69185 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A...

redis: Redis: Out-of-bounds read via crafted cluster bus packets

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames e.g., PING, PONG, CLOSE contain a payload of 125 bytes or less. A remote, unauthenticated attacker...

ROS-20260921-73-0114

The vulnerability of the Go programming language is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

RHEL 9 : libsoup (RHSA-2026:69108)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69108 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

PT-2026-96076

Name of the Vulnerable Software and Affected Versions github.com/temporalio/tchannel-go affected versions not specified Description The software fails to reject TChannel call fragments that contain checksum metadata but lack length-prefixed argument chunks. In this scenario, the fragment reader...

ROS-20260921-73-0104

The vulnerability of the 389 Directory Server catalog service server is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PT-2026-96641

Name of the Vulnerable Software and Affected Versions rsyslog affected versions not specified Description An issue exists where buffer sizes are incorrectly calculated during string replacement. A remote attacker could exploit this to cause the service to crash, leading to a denial of service...

Security update for sofia-sip (important)

openSUSE Security Update: Security update for sofia-sip Announcement ID: openSUSE-SU-2026:0330-1 Rating: important References: 1200116 1200117 1200118 Cross-References: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

DEBIAN-CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

UBUNTU-CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

EUVD-2026-83400

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...