Lucene search
+L

599 matches found

Github Security Blog
Github Security Blog
•added 2018/11/09 5:41 p.m.•54 views

Uncontrolled Resource Consumption in spray-json

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

7.5CVSS4.7AI score0.01897EPSS
SaveExploits1References3Affected Software3
Prion
Prion
•added 2018/10/31 5:29 a.m.•24 views

Code injection

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

5CVSS7.4AI score0.01897EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2018/10/31 5:29 a.m.•24 views

Code injection

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

5CVSS7.4AI score0.01897EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/10/31 5:29 a.m.•22 views

CVE-2018-18853

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

7.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2018/10/31 5:29 a.m.•27 views

CVE-2018-18853

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

7.5CVSS7.4AI score0.01897EPSS
SaveExploits1References1
CVE
CVE
•added 2018/10/31 5:00 a.m.•109 views

CVE-2018-18853

Lightbend Spray spray-json up to 1.3.4 is affected. The vulnerability is a DoS caused by Algorithmic Complexity during parsing of a field with many decimal digits, allowing remote exploitation over the network with no authentication. Impact is resource consumption/availability degradation; CVSS d...

7.5CVSS7.3AI score0.01897EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/10/31 5:00 a.m.•37 views

CVE-2018-18854

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

7.4AI score0.01897EPSS
SaveExploits1References1
CVE
CVE
•added 2018/10/31 5:00 a.m.•85 views

CVE-2018-18854

Lightbend Spray spray-json (up to version 1.3.4) is vulnerable to denial of service via Algorithmic Complexity when parsing many JSON object fields with colliding hash codes. Remote attacker could exhaust resources. Documents consistently describe the issue but do not provide official remediation...

7.5CVSS7.3AI score0.01897EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2018/06/20 2:49 p.m.•24 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS3.5AI score0.02673EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2018/06/20 2:29 p.m.•31 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7AI score0.02673EPSS
SaveExploits0References4
Prion
Prion
•added 2018/06/20 2:29 p.m.•30 views

Input validation

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

5CVSS7.4AI score0.02673EPSS
SaveExploits0References3
NVD
NVD
•added 2018/06/20 2:29 p.m.•27 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.02673EPSS
SaveExploits0References3
OSV
OSV
•added 2018/06/20 2:29 p.m.•26 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.7AI score
SaveExploits0References3
OSV
OSV
•added 2018/06/20 2:29 p.m.•9 views

ALPINE-CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS6.8AI score0.02673EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/06/20 2:00 p.m.•45 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.3AI score0.02673EPSS
SaveExploits0References3
CVE
CVE
•added 2018/06/20 2:00 p.m.•167 views

CVE-2018-12558

The CVE-2018-12558 issue affects the Perl Email::Address module (versions up to 1.909) and arises from an algorithmic complexity vulnerability in Address.pm that lets an attacker cause CPU-based Denial of Service with specially crafted input (notably a string containing 30 form-field characters, ...

7.5CVSS7.2AI score0.02673EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
•added 2018/06/20 2:00 p.m.•69 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.02673EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/06/20 2:00 p.m.•63 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.02673EPSS
SaveExploits0
OSV
OSV
•added 2017/07/17 1:18 p.m.•27 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS6.6AI score
SaveExploits0References1
NVD
NVD
•added 2017/07/17 1:18 p.m.•22 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS8.6AI score0.00932EPSS
SaveExploits0References1
Rows per page
Query Builder