SUSE CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A flaw was found in Grafana. A remote attacker with low privileges can exploit this vulnerability by sending a specially crafted resample query. This can trigger out-of-memory crashes, leading to a Denial of Service DoS for the affected system. Mitigation Mitigation for this issue is either not...

EUVD-2026-16636

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

UBUNTU-CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of the upsample size in mathexp.Resample query. An attacker can cause the system to crash or become unresponsive by sending specially crafted queries that trigger...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

CVE-2026-27879

A resample query can be used to trigger out-of-memory crashes in Grafana...

Grafana -- Query resampling can cause unbounded memory allocations

https://grafana.com/security/security-advisories/cve-2026-27879 reports: A resample query can be used to trigger out-of-memory crashes in Grafana...

PT-2026-28371

This update fixes the following issues: golang-github-lusitaniae-apache exporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fixed: CVE-2026-27606: Fixed arbitrary file write via path traversal in rollup bsc1258893 +...

EUVD-2024-38187

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-11547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid...

CVE-2024-39685 fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py resample function

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is used directly in a command executed with subprocess.runcmd, shell=True in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier...

CVE-2024-39685 fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py resample function

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is used directly in a command executed with subprocess.runcmd, shell=True in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier...

PT-2024-28624 · Unknown · Bert-Vits2

Name of the Vulnerable Software and Affected Versions: Bert-VITS2 versions 2.3 and earlier Description: The issue arises from user input being directly used in a command executed with subprocess.runcmd, shell=True in the resample function, leading to arbitrary command execution. This is due to th...

SUSE CVE-2015-9101

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

SUSE CVE-2017-14739

The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash via unspecified...

SUSE CVE-2021-20246

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

UBUNTU-CVE-2021-20246

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...