https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:14:27.632754+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-12666 bdu:2026-12666 2026-10-04T13:14:27.734700+00:00 bdu:2026-12666 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 certfr-2026-avi-1233 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T13:14:27.734738+00:00 certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/euvd-2026-357041 EUVD-2026-357041 2026-10-04T13:14:27.734758+00:00 EUVD-2026-357041 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63495 fkie_cve-2026-63495 2026-10-04T13:14:27.734771+00:00

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws->incomplete_frames without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket frames below WS_MAX_RECV_FRAME_SZ with FIN=0, causing the evbuffer to grow without bound until the process or host exhausts memory. This issue is fixed in version 2.2.2-alpha.

 https://cve.radiocsirt.org/vuln/rhsa-2026:41176 RHSA-2026:41176 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T13:14:27.734804+00:00

libevent: Libevent: Remote denial of service via unbounded memory accumulation in WebSocket server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63495 Withdrawn: UBUNTU-CVE-2026-63495 2026-10-04T13:14:27.734827+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: libevent, Ubuntu:Pro:16.04:LTS: libevent, Ubuntu:Pro:18.04:LTS: libevent, Ubuntu:Pro:20.04:LTS: libevent, Ubuntu:22.04:LTS: libevent, Ubuntu:24.04:LTS: libevent, Ubuntu:26.04:LTS: libevent

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws->incomplete_frames without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket frames below WS_MAX_RECV_FRAME_SZ with FIN=0, causing the evbuffer to grow without bound until the process or host exhausts memory. This issue is fixed in version 2.2.2-alpha.