Lucene search
K

6 matches found

Cvelist
Cvelist
added 2023/12/06 4:27 p.m.85 views

CVE-2023-39326 Denial of service via chunk extensions in net/http

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

6.7AI score0.01208EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2023/12/06 4:27 p.m.46 views

CVE-2023-39326

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

5.3CVSS6.9AI score0.01208EPSS
Exploits0
NVD
NVD
added 2020/10/22 9:15 p.m.9 views

CVE-2020-27672

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

7CVSS0.0026EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2020/10/22 9:15 p.m.23 views

CVE-2020-27672

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

7CVSS6.8AI score0.0026EPSS
Exploits0References2
Prion
Prion
added 2020/10/22 9:15 p.m.16 views

Race condition

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

6.9CVSS7AI score0.0026EPSS
Exploits0References8Affected Software4
Cvelist
Cvelist
added 2020/10/22 8:33 p.m.18 views

CVE-2020-27672

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

7.5AI score0.0026EPSS
Exploits0References8
Rows per page
Query Builder