Lucene search
K

11 matches found

Veracode
Veracode
added 2023/03/21 2:4 a.m.30 views

Denial Of Service (DoS)

jackson-databind is vulnerable to Denial Of Service DoS. The vulnerability exists because the writeExternal function in NodeSerialization.java does not properly handle JDK serialization of the JsonNode, which allows an attacker to crash the application2 GB transient heap usage per read if uses JD...

7.5CVSS7.2AI score0.0025EPSS
Exploits1References5Affected Software4
Github Security Blog
Github Security Blog
added 2023/03/19 12:30 a.m.44 views

jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS7.2AI score0.0025EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2023/03/18 10:15 p.m.16 views

CVE-2021-46877

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS7.2AI score0.0025EPSS
Exploits1References2
OSV
OSV
added 2023/03/18 10:15 p.m.22 views

CVE-2021-46877

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS7.5AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/03/18 10:15 p.m.28 views

CVE-2021-46877

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS6.8AI score0.0025EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2023/03/18 12:0 a.m.32 views

CVE-2021-46877

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS6.7AI score0.0025EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2020/01/09 7:9 p.m.43 views

CVE-2019-19911

A denial of service vulnerability was found in Pillow in versions before 6.2.2, where the FpxImagePlugin.py file calls the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows systems running 32-bit Python, this flaw results in an OverflowError or MemoryErro...

7.5CVSS2.8AI score0.0096EPSS
Exploits0References3
OSV
OSV
added 2020/01/05 10:15 p.m.25 views

CVE-2019-19911

There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux...

7.5CVSS2.2AI score
Exploits0References4
Kitploit
Kitploit
added 2014/04/21 9:43 p.m.29 views

XVI32 - Freeware Hex Editor

XVI32 is a freeware hex editor running under Windows 9x/NT/2000/XP/Vista/7. The name XVI32 is derived from XVI, the roman notation for the number 16. XVI32 and all of its components are developed by myself. The current release 2.55 is available since June 26, 2012. It comes with a complete online...

7.2AI score
Exploits0
Cvelist
Cvelist
added 2006/08/07 7:0 p.m.15 views

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

6AI score0.00063EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2006/07/05 12:0 a.m.28 views

CentOS 3 / 4 : tcpdump (CESA-2005:417)

Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. This updated package also adds support for output files larger than 2 GB. Tcpdump is a command-line tool for monitoring...

5CVSS5.3AI score0.5679EPSS
Exploits2References7
Rows per page
Query Builder