Lucene search
+L

668 matches found

RubySec
RubySec
•added 2013/09/09 12:00 a.m.•31 views

CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability

Algorithmic complexity vulnerability in Gem::Version::VERSIONPATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service CPU...

4.3CVSS5.9AI score0.03331EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2013/08/07 12:00 a.m.•57 views

CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

4CVSS5.9AI score0.02105EPSS
SaveExploits1References3
OSV
OSV
•added 2013/05/16 12:00 a.m.•21 views

UBUNTU-CVE-2013-2099

Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatchhostname as used for older Python versions, allows remote attackers to cause a denial of service CPU consumption via multiple wildcard...

4.3CVSS6.8AI score0.04857EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2013/03/12 12:00 a.m.•27 views

FreeBSD : perl -- denial of service via algorithmic complexity attack on hashing routines (68c1f75b-8824-11e2-9996-c48508086173)

Perl developers report : In order to prevent an algorithmic complexity attack against its hashing mechanism, perl will sometimes recalculate keys and redistribute the contents of a hash. This mechanism has made perl robust against attacks that have been demonstrated against other systems. Researc...

7.5CVSS8.3AI score0.03577EPSS
SaveExploits0References3
Prion
Prion
•added 2012/10/01 12:55 a.m.•38 views

Design/Logic Flaw

Algorithmic complexity vulnerability in the filterurl function in the text filtering system modules/filter/filter.module in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service CPU consumption via a long email address...

3.5CVSS6.6AI score0.01234EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
•added 2012/10/01 12:55 a.m.•56 views

CVE-2012-1588

Algorithmic complexity vulnerability in the filterurl function in the text filtering system modules/filter/filter.module in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service CPU consumption via a long email address...

3.5CVSS5.9AI score0.01234EPSS
SaveExploits0References2
NVD
NVD
•added 2012/10/01 12:55 a.m.•38 views

CVE-2012-1588

Algorithmic complexity vulnerability in the filterurl function in the text filtering system modules/filter/filter.module in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service CPU consumption via a long email address...

3.5CVSS6.1AI score0.01234EPSS
SaveExploits0References7
CVE
CVE
•added 2012/10/01 12:00 a.m.•138 views

CVE-2012-1588

CVE-2012-1588 affects Drupal core 7.x; a pattern in the text filtering system’s _filter_url/filters can cause excessive CPU usage (DoS) when processing long email-like strings. The vulnerability requires certain user roles to post content and is mitigated by upgrading. The Drupal security advisor...

3.5CVSS6.2AI score0.01234EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/01 12:00 a.m.•6 views

CVE-2012-1588: Undefined Security Weakness

Algorithmic complexity vulnerability in the filterurl function in the text filtering system modules/filter/filter.module in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service CPU consumption via a long email address...

3.5CVSS5.9AI score0.01234EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•33 views

Scientific Linux Security Update : mcstrans on SL5.x i386/x86_64

An algorithmic complexity weakness was found in the way the mcstrans daemon handled ranges of compartments in sensitivity labels. A local user could trigger this flaw causing mctransd to temporarily stop responding to other requests; a partial denial of service. CVE-2007-4570 This update also fix...

1.9CVSS5.3AI score0.00303EPSS
SaveExploits0References2
NVD
NVD
•added 2012/07/23 9:55 p.m.•20 views

CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

4CVSS6AI score0.01275EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2012/07/23 9:55 p.m.•35 views

CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

4CVSS5.9AI score0.01275EPSS
SaveExploits0References2
OSV
OSV
•added 2012/07/23 9:55 p.m.•12 views

UBUNTU-CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

4CVSS5.8AI score0.01275EPSS
SaveExploits0References3
Prion
Prion
•added 2012/07/23 9:55 p.m.•18 views

Design/Logic Flaw

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

4CVSS6.6AI score0.01275EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2012/07/23 9:00 p.m.•35 views

CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

5.9AI score0.01275EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/07/23 12:00 a.m.•3 views

CVE-2012-3398: Undefined Security Weakness

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

4CVSS5.8AI score0.01275EPSS
SaveExploits0References1
OSV
OSV
•added 2012/06/29 7:55 p.m.•16 views

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5.5AI score
SaveExploits0References18
CVE
CVE
•added 2012/06/29 12:00 a.m.•215 views

CVE-2012-2098

CVE-2012-2098 affects Apache Commons Compress (BZip2CompressorOutputStream). The vulnerability is an algorithmic complexity in the sorting routines used by the bzip2 stream, allowing an attacker to cause CPU exhaustion (DoS) by feeding input with many repeating patterns. Affected product: Apache ...

5CVSS5.3AI score0.12844EPSS
SaveExploits1References18Affected Software1
Debian CVE
Debian CVE
•added 2012/06/29 12:00 a.m.•46 views

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS7.1AI score0.12844EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/06/29 12:00 a.m.•4 views

CVE-2012-2098: Undefined Security Weakness

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS5.9AI score0.12844EPSS
SaveExploits1References2
Rows per page
Query Builder