#cwe-127

共收录 3 条相关情报。

← 返回所有主题

漏洞预警2026-10-20 发布INFO

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next req...

CVE-2026-103119

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioct...

CVE-2026-45683

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-127 #cwe-200

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

CVE-2026-45683

### Summary The Java TLS ioctl probe reads user-controlled ioctl pointers with `bpf_probe_read` instead of `bpf_probe_r

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-127 #cwe-200 #severity:low