Lucene search
+L

326 matches found

OSV
OSV
added 2018/06/20 2:29 p.m.20 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.7AI score
SaveExploits0References3
CVE
CVE
added 2018/06/20 2:0 p.m.155 views

CVE-2018-12558

The CVE-2018-12558 issue affects the Perl Email::Address module (versions up to 1.909) and arises from an algorithmic complexity vulnerability in Address.pm that lets an attacker cause CPU-based Denial of Service with specially crafted input (notably a string containing 30 form-field characters, ...

7.5CVSS7.2AI score0.0265EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/06/20 2:0 p.m.31 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.3AI score0.0265EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/06/20 2:0 p.m.56 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.0265EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2018/06/20 2:0 p.m.58 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.0265EPSS
SaveExploits0
NVD
NVD
added 2017/07/17 1:18 p.m.16 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS8.6AI score0.00932EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/17 1:18 p.m.19 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS6.6AI score
SaveExploits0References1
Prion
Prion
added 2017/07/17 1:18 p.m.18 views

Input validation

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

5CVSS7.6AI score0.01764EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2017/07/17 1:18 p.m.24 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS7.1AI score0.00932EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/07/17 12:0 a.m.6 views

CHICKEN Algorithm Complexity Vulnerability

CHICKEN Scheme is a compiler and interpreter based on the Scheme language , it can compile Scheme code into standard C code , and supports extensions . A security vulnerability exists in CHICKEN Scheme 4.12.0 and earlier versions. An attacker can exploit the vulnerability to perform an algorithmi...

7.5CVSS6.9AI score0.00932EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/07/16 9:0 p.m.26 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5AI score0.00932EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/07/16 9:0 p.m.70 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS7.6AI score0.00932EPSS
SaveExploits0
CVE
CVE
added 2017/07/16 9:0 p.m.111 views

CVE-2017-11343

CHICKEN Scheme versions up to 4.12.0 are vulnerable to an algorithmic complexity attack due to an incomplete fix for CVE-2012-6125. The issue arises from crafted input causing O(n) symbol-table lookups. The Fedora advisory FEDORA-2017-76ce091a43 provides a fix for CVE-2017-11343 (referenced in th...

7.5CVSS7.4AI score0.00932EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2017/07/16 12:0 a.m.18 views

PT-2017-11944 · Chicken +1 · Chicken Scheme +1

Name of the Vulnerable Software and Affected Versions: CHICKEN Scheme versions prior to 4.12.1 Description: The issue is related to an incomplete fix for a previous problem, which allows an algorithmic complexity attack. An attacker can provide crafted input that, when inserted into the symbol...

9.8CVSS7.7AI score0.04523EPSS
SaveExploits0References25
Veracode
Veracode
added 2017/06/23 10:19 a.m.17 views

Denial Of Service (DoS)

Moodle is vulnerable to denial of service DoS attacks. A malicious user can use the advanced-search feature on a database to cause a algorithmic complexity attack, leading to the service being unavailable...

4CVSS5.7AI score0.01275EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2015/10/11 12:0 a.m.6 views

Perl Email-Address Module Denial of Service Vulnerability

Perl is a cross-platform programming language and Email-Address is one of the email address modules. An algorithmic complexity vulnerability in the Address.pm file of Perl Email-Address allows remote attackers to submit special strings for denial of service attacks...

7.8CVSS8.5AI score0.03072EPSS
SaveExploits0References1
NVD
NVD
added 2015/10/06 1:59 a.m.32 views

CVE-2015-7686

Algorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier for Perl allows remote attackers to cause a denial of service CPU consumption via a crafted string containing a list of e-mail addresses in conjunction with parenthesis characters that can be associat...

7.8CVSS7.4AI score0.03072EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.34 views

Oracle: Security Advisory (ELSA-2013-1441)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6AI score0.03343EPSS
SaveExploits0References2
CVE
CVE
added 2015/10/03 10:0 a.m.89 views

CVE-2015-7686

CVE-2015-7686 is a confirmed algorithmic complexity DoS in the perl-Email-Address package’s Address.pm (v1.908 and earlier). It allows remote denial of service via a crafted string of email addresses with nested comments; default config mitigates some cases but parsing can still misbehave. Public...

7.8CVSS7.2AI score0.03072EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.20 views

Amazon Linux: Security Advisory (ALAS-2013-230)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.8AI score0.03343EPSS
SaveExploits0References2
Rows per page
Query Builder