CVE-2025-37816 mei: vsc: Fix fortify-panic caused by invalid counted_by() use

In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid countedby use gcc 15 honors the countedbylen attribute on vsctppacket.buf and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it...

CVE-2025-41399

When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-36504

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41399 SCTP Vulnerability

When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

org.graylog.plugins:usage-statistics (>=1.0.3, <=1.0.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.3, =1.0.4 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (>=1.0.7, <=1.1.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.1.0)

org.graylog2:graylog2-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.7, =1.1.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (1.2.2), org.graylog2:graylog2-rest-routes (1.3.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.3.3)

org.graylog2:graylog2-server MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 1.2.2 - org.graylog2:graylog2-rest-routes 1.3.3 Source cves:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.2 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.4)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.4 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.5) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.5)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.5 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-beta.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-beta.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.2 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-beta.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-rc.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-rc.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0)

org.graylog2:graylog2-server MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.2)

org.graylog2:graylog2-server MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.2 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-alpha.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-alpha.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.1 Source cves: CVE-2025-46827 Source advisory:...