Browse CVEs

MEDIUM 5.5 CVE-2023-53051 In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may b… Linux Kernel 4.14.312 / 4.19.280+ Fix from $1,6002025-05-02 HIGH 7.5 CVE-2025-3857 When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from … Mitigation only Fix from $1,9502025-04-21 MEDIUM 5.5 CVE-2024-58097 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring While proces… Linux Kernel 6.14.2+ Fix from $1,6002025-04-16 HIGH 7.5 CVE-2025-32947 This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint wh… Peertube 7.1.1+ Fix from $1,9502025-04-15 MEDIUM 5.5 CVE-2025-29918 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that… Suricata 7.0.9+ Fix from $1,6002025-04-10 MEDIUM 6.9 CVE-2025-32029 ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service f… Patch available Fix from $1,6002025-04-07 MEDIUM 5.5 CVE-2025-21971 In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_r… Linux Kernel 5.4.292 / 5.10.236+ Fix from $1,6002025-04-01 MEDIUM 5.5 CVE-2025-21942 In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix extent range end unlock in cow_file_range() Running generic/7… Linux Kernel 6.13.7+ Fix from $1,6002025-04-01 MEDIUM 5.5 CVE-2023-53026 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR… Linux Kernel 5.4.231 / 5.10.166+ Fix from $1,6002025-03-27 MEDIUM 5.5 CVE-2025-21871 In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon a… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,6002025-03-27 MEDIUM 6.5 CVE-2025-2838 Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to … Gecko Os Mitigation only Fix from $1,6002025-03-26 HIGH 7.5 CVE-2024-9340 A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by … Zenml 0.68.0+ Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-12704 A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The … Llamaindex Patch available Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-10907 In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exp… Fastchat No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-10821 A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server (version v5.0.1) allows unauth… Mitigation only Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-10829 A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated a… Db Gpt No fix yet Fix from $1,9502025-03-20 HIGH 8.7 CVE-2025-29776 Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an im… Mitigation only Fix from $1,9502025-03-14 MEDIUM 5.5 CVE-2025-21850 In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter prot… Linux Kernel 6.13.5+ Fix from $1,6002025-03-12 HIGH 8.7 CVE-2025-27497 OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to bec… Patch available Fix from $1,9502025-03-05 MEDIUM 5.3 CVE-2025-1695 In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in … Nginx Unit 1.34.2+ Fix from $1,6002025-03-04 MEDIUM 5.5 CVE-2022-49317 In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to flush node pages xfstests/generic/475 can give EIO… Linux Kernel 5.18.4+ Fix from $1,6002025-02-26 MEDIUM 5.5 CVE-2022-49097 In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempool_alloc() In a low memory s… Linux Kernel 5.10.111 / 5.15.34+ Fix from $1,6002025-02-26 MEDIUM 6.1 CVE-2024-6790 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002025-02-03 MEDIUM 5.5 CVE-2025-21681 In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a … Linux Kernel 6.1.127 / 6.6.74+ Fix from $1,6002025-01-31 MEDIUM 5.5 CVE-2025-21665 In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_see… Linux Kernel 5.15.177 / 6.1.127+ Fix from $1,6002025-01-31 MEDIUM 5.5 CVE-2025-21667 In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomap… Linux Kernel 6.1.127 / 6.6.74+ Fix from $1,6002025-01-31 MEDIUM 5.5 CVE-2025-21668 In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: add missing loop break condition Currently imx8mp_bl… Linux Kernel 6.1.127 / 6.6.74+ Fix from $1,6002025-01-31 HIGH 7.5 CVE-2024-40675 In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service wi… Android Mitigation only Fix from $1,9502025-01-28 MEDIUM 5.5 CVE-2024-57940 In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfat_readdir() If the file system is corrupted… Linux Kernel 6.1.125 / 6.6.72+ Fix from $1,6002025-01-21 MEDIUM 5.4 CVE-2025-23221 Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to man… Patch available Fix from $1,6002025-01-20