11796 matches found
CLEANSTART-2026-OL25917 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the velero package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-DZ14042 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
CLEANSTART-2026-XD86126 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...
CLEANSTART-2026-DW61297 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
CVE-2026-78669 affects multiple packages. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values. See references for individual vulnerability...
CLEANSTART-2026-RK66393 multer is a middleware for handling multipart/form-data in Node
Security vulnerability affects the n8n package. multer is a middleware for handling multipart/form-data in Node...
CLEANSTART-2026-LO86416 net/url package does not set a limit on the number of query parameters in a query
Security vulnerability affects the victoria-metrics package. The net/url package does not set a limit on the number of query parameters in a query...
CLEANSTART-2026-YB58885 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-KU24747 Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack
Security vulnerability affects the apache-hive package. Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service DoS attack...
CLEANSTART-2026-QW68592 Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit
Security vulnerability affects the apache-hive package. A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit...
CLEANSTART-2026-SC57620 Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1
Security vulnerability affects the elasticsearch package. Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1...
CLEANSTART-2026-QQ95975 Security fix for GHSA-5c6j-r48x-rmvq applied in: argo-workflows 4.0.12-r1
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PL58234 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-IJ88105 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver
Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver...
CLEANSTART-2026-UP97351 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-TD63490 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion
Security vulnerability affects the argo-cd package. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
CLEANSTART-2026-DI50489 Caddy is an extensible server platform that uses TLS by default
Security vulnerability affects the caddy package. Caddy is an extensible server platform that uses TLS by default...
CLEANSTART-2026-MZ50851 flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled
Security vulnerability affects the keycloak package. A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled...
CLEANSTART-2026-RY77599 Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains
Security vulnerability affects the keycloak package. Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains...
CLEANSTART-2026-EU32419 It was identified that the LDAP client implementation in version 2
Security vulnerability affects the keycloak package. It was identified that the LDAP client implementation in version 2...
CLEANSTART-2026-CC87108 It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3
Security vulnerability affects the wildfly package. It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3...
CLEANSTART-2026-MV72280 Security fix for GHSA-8wmf-6v46-5gfg applied in: knative-net-istio 1.20.4-r5
Security vulnerability affects the knative-net-istio package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NP24687 Security fix for CVE-2025-47903 applied in: consul-k8s-fips 1.7.8-r0, consul-k8s-fips 1.8.1-r0, consul-k8s-fips 1.8.6-r0
CVE-2025-47903 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-PS05327 Security fix for CVE-2025-53547 applied in: consul-k8s-fips 1.5.9-r0, harbor 2.13.4-r2, harbor 2.14.2-r1, k8sgpt 0.4.26-r2, kubevela 1.10.8-r0
CVE-2025-53547 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-PR49878 Security fix for GHSA-f6x5-jh6r-wrfv applied in: argo-cd 3.1.9-r4, argo-cd-fips 2.14.20-r1, argo-cd-fips 3.0.20-r2, argo-cd-fips 3.1.9-r4, argo-workflows-fips 3.4.18-r0, atlantis 0.37.1-r1, atlantis-fips 0.37.1-r0, calico-fips 3.28.5-r2, cert-manager-fips 1.18.2-r0, certificate-transparency-trillian-ctserver 1.3.2-r0, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cfssl 1.5.0-r1, cloudprober-fips 0.14.1-r0, consul-fips 1.21.5-r0, cortex-fips 1.20.1-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane-provider-sql 0.13.0-r0, crossplane-provider-sql-fips 0.13.0-r0, dcgm-exporter 4.5.1-r0, descheduler 0.34.0-r0, dex-fips 2.41.1-r3, dex-fips 2.42.1-r3, dex-fips 2.43.1-r3, distribution 3.0.0-r0, dynamic-localpv-provisioner 4.4.0-r0, eck-operator 3.2.0-r0, eck-operator-fips 3.2.0-r0, eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, elastic-beats-fips 9.0.8-r1, elastic-beats-fips 9.2.0-r2, external-dns 0.18.0-r0, external-dns-fips 0.20.0-r2, external-secrets-fips 0.17.0-r0, external-secrets-fips 0.20.4-r1, falcoctl 0.11.0-r0, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r2, fulcio 1.8.2-r0, fulcio-fips 1.8.2-r0, git-lfs-fips 3.7.0-r2, gitlab-shell 14.45.5-r0, gitlab-shell-fips 14.45.5-r0, gitness 3.3.0-r1, go-fips-1.25 1.25.6-r0, go1.24 1.24.11-r0, go1.26 1.25.5-r0, gomplate-fips 4.3.3-r3, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, gptscript 0.9.7-r1, gpu-operator 25.10.0-r1, gpu-operator-fips 25.10.0-r1, harbor 2.13.4-r0, harbor 2.14.2-r0, harbor-fips 2.14.2-r0, harbor-registry 3.0.0.1-r2, helm-fips 3.19.0-r1, helm-fips 3.19.0-r2, jitsucom-bulker 2.11.913-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, k8ssandra-client-fips 0.8.4-r0, kapp-controller 0.59.0-r0, kapp-controller-fips 0.59.0-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.19.1-r1, kube-state-metrics-fips 2.17.0-r1, kubernetes 1.33.11-r0, kubernetes 1.34.7-r0, kubernetes-csi-external-snapshotter 8.4.0-r0, kubernetes-csi-external-snapshotter-fips 8.4.0-r0, kubernetes-dashboard-api 1.14.0-r0, kubernetes-dashboard-api-fips 1.14.0-r0, kubernetes-dashboard-auth 1.4.0-r0, kubernetes-dashboard-auth-fips 1.4.0-r0, kubernetes-dashboard-web 1.7.0-r0, kubernetes-dashboard-web-fips 1.7.0-r0, litestream 0.5.2-r1, local-static-provisioner 2.8.0-r0, minio-operator 7.1.1-r3, minio-operator-fips 5.0.18-r7, minio-operator-fips 6.0.4-r7, minio-operator-fips 7.0.1-r7, minio-operator-fips 7.1.1-r7, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, openbao 2.4.3-r0, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.18.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r0, postgres-operator 1.12.2-r2, prom-mysqld-exporter-fips 0.18.0-r0, prometheus-blackbox-exporter 0.27.0-r0, prometheus-mongodb-exporter 0.47.2-r0, prometheus-mongodb-exporter-fips 0.47.2-r0, prometheus-mysqld-exporter 0.18.0-r0, prometheus-mysqld-exporter-fips 0.18.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, prometheus-operator-fips 0.85.0-r2, prometheus-operator-fips 0.86.2-r1, prometheus-operator-fips 0.87.0-r1, prometheus-statsd-exporter 0.28.0-r0, prometheus-statsd-exporter-fips 0.28.0-r0, promxy 0.0.93-r0, rabbitmq-messaging-topology-operator 1.15.0-r1, rekor-backfill-index 1.4.3-r0, secrets-store-csi-driver-fips 1.5.4-r0, skaffold 2.16.1-r1, step-issuer-fips 0.9.9-r1, tekton-chains 0.26.0-r0, tekton-chains-fips 0.26.0-r0, tekton-pipelines 1.5.0-r0, tekton-pipelines-fips 1.5.0-r0, tempo 2.9.0-r0, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0, trivy-fips 0.67.2-r0, velero-fips 1.14.1-r1, velero-fips 1.16.2, velero-fips 1.16.2-r2, wavefront-collector-for-kubernetes 1.13.0-r0
GHSA-f6x5-jh6r-wrfv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GA56575 Security fix for GHSA-x4rx-4gw5-53pq applied in: helm-operator-fips 1.41.1-r0
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AM99343 Security fix for GHSA-xwmg-2g98-w7v9 applied in: druid-fips 35.0.0-r1, kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1, stargate 1.0.90-r4, stargate 1.0.91-r2, stargate 2.0.44-r5, stargate 2.0.44-r6, stargate 2.0.48-r0
GHSA-xwmg-2g98-w7v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-CM50083 Security fix for GHSA-4c4x-jm2x-pf9j applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2
GHSA-4c4x-jm2x-pf9j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2
CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-HS45258 Security fix for GHSA-f2g3-hh2r-cwgc applied in: gitness 3.3.0-r2, zot 2.1.13-r2
GHSA-f2g3-hh2r-cwgc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-EV94436 Security fix for CVE-2026-35469 applied in: argo-cd 3.0.23-r2, argo-cd 3.2.7-r2, argo-cd 3.3.5-r0, argo-cd-fips 3.1.14-r0, argo-cd-fips 3.2.9-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, argo-workflows 3.6.19-r5, argo-workflows 4.0.4-r1, argo-workflows-fips 4.0.4-r1, cert-manager-cmctl-fips 2.4.0-r3, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.27.4-r0, cloudnative-pg-fips 1.28.1-r3, cloudnative-pg-fips 1.28.2-r0, dynamic-localpv-provisioner 4.3.0-r1, dynamic-localpv-provisioner 4.5.0-r1, dynatrace-operator 1.9.0-r0, flux-notification-controller-fips 1.5.0-r0, gitlab-runner 18.11.1-r0, helm 4.0.5-r2, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, istio 1.27.9-r0, istio 1.28.5-r3, istio 1.29.2-r1, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.27.9-r0, istio-fips 1.28.5-r3, istio-fips 1.29.1-r2, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, k8ssandra-client-fips 0.5.0-r10, k8ssandra-client-fips 0.6.4-r8, k8ssandra-client-fips 0.7.0-r6, k8ssandra-client-fips 0.8.10-r1, kube-bench 0.15.0-r0, kubernetes 1.34.1-r4, kubernetes 1.35.3-r2, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubevela 1.10.8-r0, kured 1.20.0-r0, linkerd2 25.12.3-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.19.1-r0, percona-xtradb-cluster-operator-fips 1.16.1-r1, percona-xtradb-cluster-operator-fips 1.17.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r4, percona-xtradb-cluster-operator-fips 1.19.1-r0, postgres-operator 1.12.2-r2, postgres-operator 1.15.1-r1, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-cluster-operator 2.20.0-r1, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, velero 1.17.2-r2, velero-fips 1.17.2-r6, velero-fips 1.18.0-r2
CVE-2026-35469 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-QU10811 Security fix for CVE-2026-33247 applied in: nats-server-fips 2.12.5-r1
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-MU35489 Security fix for CVE-2026-43513 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1
CVE-2026-43513 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OT08451 Security fix for CVE-2026-40898 applied in: kube-metrics-adapter 0.2.9-r0, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, prometheus-blackbox-exporter 0.28.0-r2
CVE-2026-40898 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FS83824 Security fix for CVE-2026-41851 applied in: activemq 5.19.8-r3, apache-hive 4.1.0-r5, apache-nifi 2.6.0-r3, apache-nifi-registry 2.9.0-r3, rundeck 6.0.0-r0, spring-boot 3.4.13-r2
CVE-2026-41851 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GW29124 Security fix for CVE-2024-0874 applied in: kubernetes-dns-node-cache-fips 1.26.0-r1
Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YU49777 Security fix for CVE-2026-28735 applied in: prometheus-node-exporter 1.10.2-r3, prometheus-node-exporter 1.11.1-r2, prometheus-node-exporter 1.12.1-r0, prometheus-node-exporter 1.9.1-r3
CVE-2026-28735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WP38878 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cloudnative-pg-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-GT00731 zstd-jni versions before 1
Multiple security vulnerabilities affect the spark-sc213-jdk17-py312 package. zstd-jni versions before 1. See references for individual vulnerability details...
CLEANSTART-2026-GG40538 jackson-databind's deserializer for java
Multiple security vulnerabilities affect the trino package. jackson-databind's deserializer for java. See references for individual vulnerability details...
CLEANSTART-2026-OB74177 Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5
Multiple security vulnerabilities affect the spring-boot package. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details...
CLEANSTART-2026-JY79008 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
Multiple security vulnerabilities affect the apache-hive package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-HA46232 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Multiple security vulnerabilities affect the metallb package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
CLEANSTART-2026-AJ83096 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Multiple security vulnerabilities affect the logstash-exporter package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
CLEANSTART-2026-LE73008 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Multiple security vulnerabilities affect the prometheus-redis-exporter package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-DJ05320 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...
CLEANSTART-2026-HB08666 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...
CLEANSTART-2026-LJ43739 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
CLEANSTART-2026-CW68169 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Multiple security vulnerabilities affect the argo-workflows package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...