#cwe-401

共收录 232 条相关情报。

← 返回所有主题
漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec i...

CVE-2026-48059

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Fina

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingD...

CVE-2026-48043

Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler perm...

CVE-2026-48006

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Fina

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and ...

CVE-2026-20746

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust j

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

CVE-2026-48059

### Impact The HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client se

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-11 发布INFO

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

CVE-2026-48043

### Impact The `DelegatingDecompressorFrameListener` class orchestrates HTTP/2 decompression by embedding a per-stream

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-11 发布INFO

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

CVE-2026-48006

### Impact The RedisArrayAggregator handler permanently leaks pooled direct-memory buffers when a Redis pipeline connect

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parse...

CVE-2026-53464

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions in @libp2p/gossipsub allow an unauthenticated single peer...

CVE-2026-46679

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcurrentHashMap introduced for J...

CVE-2026-45682

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write opera...

CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free the ticket and the s...

CVE-2026-46012

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response()

来源摘录 · NVD

漏洞预警2026-05-27 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super error path Fix two memory leaks in the gfs2_fill_super() error ha...

CVE-2026-45961

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super error pat

来源摘录 · NVD

安全公告2026-05-26 发布INFO

A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the...

CVE-2026-9572

A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the component MP4Box. ...

CVE-2026-9572

A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample o

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

js-libp2p: Memory DoS via subscription flood of unique topics

CVE-2026-46679

### Summary Three cooperating omissions in `@libp2p/gossipsub` allow an unauthenticated single peer to exhaust the Node.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

CVE-2026-45682

### Summary The custom `CappedConcurrentHashMap` introduced for Java TLS state tracking never removes keys from its ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

UltraJSON has a Memory Leak in ujson.dump() on Write Failure

CVE-2026-44660

### Summary When `ujson.dump()` writes to a file-like object and the write operation raises an exception, the serialize

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布INFO

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-35424

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorize

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not fre...

CVE-2026-43419

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() A

来源摘录 · NVD