#cwe-130

共收录 53 条相关情报。

← 返回所有主题
漏洞预警2026-07-17 发布INFO

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establi...

CVE-2026-60060

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provide

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

websocket-driver: Message corruption via abuse of protocol length headers

CVE-2026-54466

### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitra

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol v2 header generator ...

CVE-2026-47692

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dynamic memory leakage.

CVE-2026-6432

Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dynamic memory leakage.

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

CVE-2026-48487

### Impact `_read_character_string` and `_read_string` in `src/zeroconf/_protocol/incoming.py` sliced `self.data[self.o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buffer fallback path uses a 256...

CVE-2026-45681

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decoding skeleton files generated by asn1c (specifically INTEG...

CVE-2026-45615

mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set. In src/bgp_protoc...

CVE-2026-48685

FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attrib

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

CVE-2026-45681

### Summary The per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-06 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and c...

CVE-2026-43125

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The le

来源摘录 · NVD

漏洞预警2026-05-05 发布INFO

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPLOAD_MAX_MEMORY_SIZ...

CVE-2026-5766

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated `Content-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake frag...

CVE-2026-33846

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bo...

CVE-2026-35547

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of vali

历史摘要 · 未重新核验 · NVD