https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:03:34.017047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4689 ALSA-2020:4689 — Moderate: openwsman security update 2026-10-05T18:03:34.205886+00:00

Affected: AlmaLinux:8: libwsman-devel, AlmaLinux:8: libwsman1, AlmaLinux:8: openwsman-client, AlmaLinux:8: openwsman-python3, AlmaLinux:8: openwsman-server

Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects.

Security Fix(es):

* openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-01181 bdu:2019-01181 2026-10-05T18:03:34.205996+00:00 bdu:2019-01181 https://cve.radiocsirt.org/vuln/euvd-2026-49750 EUVD-2026-49750 2026-10-05T18:03:34.206021+00:00 EUVD-2026-49750 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3833 fkie_cve-2019-3833 2026-10-05T18:03:34.206034+00:00

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.

 https://cve.radiocsirt.org/vuln/ghsa-6gg2-jx5v-58c2 GHSA-6gg2-jx5v-58c2 2026-10-05T18:03:34.206057+00:00

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.

 https://cve.radiocsirt.org/vuln/gsd-2019-3833 gsd-2019-3833 2026-10-05T18:03:34.206073+00:00 gsd-2019-3833 https://cve.radiocsirt.org/vuln/msrc_cve-2019-3833 msrc_CVE-2019-3833 — Openwsman versions up to and including 2.6.9 are vulnerable to infinite loop in process_connection() when parsing speci… 2026-10-05T18:03:34.206083+00:00 msrc_CVE-2019-3833 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1111-1 openSUSE-SU-2019:1111-1 — Security update for openwsman 2026-10-05T18:03:34.206101+00:00

Security update for openwsman

 https://cve.radiocsirt.org/vuln/suse-su-2019:0654-1 SUSE-SU-2019:0654-1 — Security update for openwsman 2026-10-05T18:03:34.206116+00:00

Security update for openwsman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3833 UBUNTU-CVE-2019-3833 2026-10-05T18:03:34.206130+00:00

Affected: Ubuntu:16.04:LTS: openwsman, Ubuntu:18.04:LTS: openwsman, Ubuntu:20.04:LTS: openwsman, Ubuntu:22.04:LTS: openwsman, Ubuntu:24.04:LTS: openwsman, Ubuntu:25.10: openwsman, Ubuntu:26.04:LTS: openwsman

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0012 WID-SEC-W-2026-0012 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-05T18:03:34.206158+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.