2677 matches found
CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...
CVE-2026-19617
CVE-2026-19617 affects libdm (LVM2). A remote attacker can craft a deeply nested LVM metadata configuration that triggers uncontrolled recursion in the libdm configuration parser, exhausting the stack and causing DoS for any LVM command reading the metadata. Documented impact is Denial of Service...
CVE-2026-19617
A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...
EUVD-2026-58594
A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
EUVD-2026-58509
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
EUVD-2026-58508
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
Linux Distros Unpatched Vulnerability : CVE-2026-33818
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. CVE-2026-33818 Note that Nessus relies on t...
Linux Distros Unpatched Vulnerability : CVE-2026-56859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. CVE-2026-56859 Note that Nessus relies on...
PT-2026-71969
A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...
Linux Distros Unpatched Vulnerability : CVE-2026-19617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could...
CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
DEBIAN-CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
AZL-98637 CVE-2026-56859 affecting package golang 1.27.1-1
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
AZL-96641 CVE-2026-56859 affecting package golang 1.25.12-1
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
AZL-96677 CVE-2026-56859 affecting package golang 1.26.7-1
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...