FreeBSD : uriparser -- Denial of Service through Unbound Recursion (65abbad5-da78-11f0-b6d5-843a4b343614)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 65abbad5-da78-11f0-b6d5-843a4b343614 advisory. The URIparser project reports: uriparser through 0.9.9 allows unbounded recursion and stack consumption...

PT-2026-142421

Security vulnerability affects the qpdf package. A stack-consumption vulnerability was found in libqpdf in QPDF 6...

Astra Linux – vulnerability in netcdf

An issue was found in ezXML versions 0.8.3 through 0.8.6. The ezxmlentok function mishandles recursion, resulting in stack consumption when processing a specially crafted XML file...

Astra Linux – vulnerability in binutils

An issue was found in cp-demangle.c within GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many ‘P’ characters...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms including gdb-headless, gdb, binutils-gold, binutils, cpp, gcc, gcc-gdb-plugin, libgcc, libgomp, libstdc++, python-unversioned-command, platform-python, python3,...

PT-2026-80544

libcroco through 0.6.13 has excessive recursion in cr parser parse any core in cr-parser.c, leading to stack consumption...

OPENSUSE-SU-2026:20910-1 Security update for uriparser

This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption bsc1255000...

Security update for uriparser

This update for uriparser fixes the following issue: CVE-2025-67899: unbounded recursion and stack consumption bsc1255000. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...

SUSE-SU-2026:22084-1 Security update for uriparser

This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption bsc1255000...

OESA-2026-2188 uriparser security update

The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...

JLSEC-2026-304

HDF5 Library through 1.14.3 allows stack consumption in the function H5Eprintfstack in H5Eint.c...

PT-2026-39352

HDF5 Library through 1.14.3 allows stack consumption in the function H5E printf stack in H5Eint.c...

OESA-2026-2089 gcc security update

The gcc package contains the GNU Compiler Collection version 14. Security Fixes: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new.CVE-2022-27943...

uriparser: uriparser: Unbounded recursion and stack consumption via large input

A flaw was found in uriparser. This vulnerability allows unbounded recursion and stack consumption via large input containing many commas...

PT-2026-32450

The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

Security update for uriparser

This update for uriparser fixes the following issues: CVE-2025-67899: large input containing many commas can cause unbounded recursion and stack consumption bsc1255000. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:0444-1 Security update for uriparser

This update for uriparser fixes the following issues: - CVE-2025-67899: large input containing many commas can cause unbounded recursion and stack consumption bsc1255000...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000889 advisory. Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denia...

MiracleLinux 3 : dbus-1.1.2-15.AXS3 (AXSA:2011-108:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-108:01 advisory. D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messagin...

CVE-2021-41737

In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = route3333333333333333333,2,1,2,3,1 : ;" leads to stack consumption...