#cwe-401

共收录 232 条相关情报。

← 返回所有主题
漏洞预警2026-09-29 发布INFO

An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot convert. The Session branch...

CVE-2026-102716

An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Sessio

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

CVE-2026-102716

CVE-2026-102716

An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Sessio

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-29 发布INFO

CVE-2026-102762

CVE-2026-102762

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-95395

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default...

CVE-2026-102005

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process...

CVE-2026-102006

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem fa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-28 发布INFO

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before ...

CVE-2026-102006

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem fa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to ...

CVE-2026-102005

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths issue_beacon(), issue_probersp(...

CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks o

来源摘录 · NVD

漏洞预警2026-09-22 发布INFO

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode. The XS backend allocates the scalar it returns b...

CVE-2026-87078

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_pu

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode

CVE-2026-87078

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_pu

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-21 发布INFO

vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggre...

CVE-2026-94627

vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child reque

历史摘要 · 未重新核验 · NVD

安全公告2026-09-21 发布INFO

vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

CVE-2026-94627

vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child reque

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-...

CVE-2026-63448

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspect...

CVE-2026-63446

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference...

CVE-2026-93436

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode di

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requ...

CVE-2026-93436

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode di

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on...

CVE-2026-92230

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container thr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundl...

CVE-2026-92230

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container thr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0 through PeerStream...

CVE-2026-86040

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthe

历史摘要 · 未重新核验 · NVD