Attributed metadata history
Up to 100 retained publisher events per page for 0a48ab11227400d05dd5f07c578a9e9c96867f631b7615f3a5e58a014b132477. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_967fc5109ac4b9114d
observed · 2026-10-12 13:03:03 UTC
Thank you to Peter Cullen (@pbcullen), Stefan Goetz (@stefangoetzcorelight), Jan Grashöfer (@J-Gras), Eldon Koyle (@ekoyle), Kara Zaffarano and Kyle Elliott of Trail of Bits in collaboration with OpenAI, AdaLogics in collaboration with Anthropic, and the Canadian Communications Security Establishment for their contributions to this release. This release fixes the following security issues: HIGH: SMB: Chains of AndX messages can crash Zeek Advisory: GHSA-2xc9-g36m-w7jh HIGH: DNP3: Memory exhaustion via file control (g70v1) fields Advisory: GHSA-px95-jfxw-4jw2 HIGH: SIP: Memory exhaustion from long request/response paths Advisory: GHSA-wjf9-326g-m9h3 HIGH: DHCP: Memory exhaustion from retained options after analyzer violation Advisory: GHSA-hxj7-pcq9-c949 HIGH: SMTP: Memory exhaustion from large numbers of rcptto/to/cc/path entries Advisory: GHSA-49x5-fmqq-4ccv HIGH: SMB: DCE/RPC memory exhaustion from fragment state Advisory: GHSA-rmc2-mqq6-wcw9 HIGH: Analyzer manager: Equivalent scheduled analyzers could exhaust memory Advisory: GHSA-3gxr-8f49-vrgr HIGH: ZIP: Unbounded decompression Advisory: GHSA-2prm-q48h-m96w HIGH: Redis: Parsed Redis traffic memory exhaustion
Fingerprint: 6f943450ccbc5010b6fe873b33a211fd2cf10ac5988b34711571af0c69ba8c74
intelligence_src_967fc5109ac4b9114d
observed · 2026-10-12 13:03:03 UTC
available
Fingerprint: aad7192696c6b2cb08b8513f6429b7db52d95a93de11b872e872a4ec57aa6f95