Lucene search
+L

1364 matches found

Prion
Prion
•added 2023/12/19 2:15 p.m.•24 views

Heap overflow

Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

6.8CVSS6.8AI score0.01544EPSS
SaveExploits0References9Affected Software4
Mend
Mend
•added 2023/12/19 1:38 p.m.•3 views

CVE-2023-6858

Firefox was susceptible to a heap buffer overflow in "nsTextFragment" due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

8.8CVSS0.01544EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
•added 2023/12/19 1:38 p.m.•36 views

CVE-2023-6858

Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

8.8CVSS8.7AI score0.01544EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/12/19 1:38 p.m.•32 views

CVE-2023-6858

Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

8.8CVSS9.7AI score0.01544EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•2 views

CVE-2023-6858: Out-of-bounds Write

Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

8.8CVSS8AI score0.01544EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2023/12/14 3:54 p.m.•39 views

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.4 release and security update

Red Hat Integration Camel for Spring Boot 3.20.4 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.6AI score0.01741EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2023/12/07 3:30 p.m.•54 views

(RHSA-2023:7705) Important: Red Hat Build of Apache Camel for Quarkus 2.13.3 security update (RHBQ 2.13.9.Final)

A security update for Red Hat Build of Apache Camel for Quarkus 2.13.3 is now available updates to RHBQ 2.13.9.Final. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Important. A Common...

7.5CVSS6.5AI score0.02459EPSS
SaveExploits3
RedHat Linux
RedHat Linux
•added 2023/11/30 3:00 p.m.•45 views

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel for Quarkus 3.2.0 release (RHBQ 3.2.9.Final)

Red Hat Build of Apache Camel for Quarkus 3.2.0 is now available updates to RHBQ 3.2.9.Final. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products Red Hat Build of Apache Camel fo...

7.5CVSS6.6AI score0.02221EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2023/11/21 11:27 a.m.•71 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.23 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.23 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

7.5CVSS6.8AI score0.99999EPSS
SaveExploits21References15
Cvelist
Cvelist
•added 2023/11/02 10:37 a.m.•46 views

CVE-2023-43076

Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially exploit this vulnerability to cause an out of memory OOM condition...

6.5CVSS6.7AI score0.00624EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2023/10/25 6:17 p.m.•3 views

DEBIAN-CVE-2023-46120

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

7.5CVSS0.01069EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•33 views

CVE-2023-46120

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

7.5CVSS6.1AI score0.01069EPSS
SaveExploits1References4
Prion
Prion
•added 2023/10/25 6:17 p.m.•30 views

Memory corruption

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

5CVSS7.6AI score0.01069EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2023/10/25 8:28 a.m.•57 views

CVE-2023-30551

A flaw was found in Rekor. Versions prior to 1.1.1 may crash due to out of memory OOM conditions caused by reading archive metadata files into memory without checking their sizes first. Verification of a JAR file submitted to Rekor can cause an out of memory crash if files within the META-INF...

7.5CVSS6.8AI score0.0105EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2023/10/25 12:00 a.m.•43 views

CVE-2023-46120

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

7.5CVSS7.1AI score0.01069EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2023/10/24 11:05 p.m.•8 views

CVE-2023-46120

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

7.5CVSS0.01069EPSS
SaveExploits1
Cvelist
Cvelist
•added 2023/10/24 11:05 p.m.•32 views

CVE-2023-46120 RabbitMQ Java client's lack of message size limitation leads to remote DoS attack

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

4.9CVSS7.6AI score0.01069EPSS
SaveExploits1References4
osv-cve
osv-cve
•added 2023/10/24 11:05 p.m.•40 views

CVE-2023-46120 RabbitMQ Java client's lack of message size limitation leads to remote DoS attack

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

4.9CVSS7.6AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/10/24 1:49 a.m.•45 views

RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack

Summary maxBodyLebgth was not used when receiving Message objects. Attackers could just send a very large Message causing a memory overflow and triggering an OOM Error. PoC RbbitMQ Use RabbitMQ 3.11.16 as MQ and specify Message Body size 512M here it only needs to be larger than the Consumer memo...

7.5CVSS6.6AI score0.01069EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•5 views

CVE-2023-46120: Uncontrolled Resource Consumption

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may...

7.5CVSS6.5AI score0.01069EPSS
SaveExploits1References3
Rows per page
Query Builder