Lucene search
+L

1052 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•7 views

CVE-2022-40188: Inefficient Algorithmic Complexity

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS7.2AI score0.01946EPSS
SaveExploits0References3
Mend
Mend
•added 2022/09/23 12:00 a.m.•6 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

8.7CVSS0.01946EPSS
SaveExploits0References12
CVE
CVE
•added 2022/09/23 12:00 a.m.•156 views

CVE-2022-40188

CVE-2022-40188 affects Knot Resolver prior to version 5.5.3. The issue is a remote denial-of-service via CPU consumption caused by algorithmic complexity when an attack results in large nameserver or address sets being returned by an authoritative server. Public advisories (NVD entry and various ...

7.5CVSS7.2AI score0.01946EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2022/09/23 12:00 a.m.•50 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5AI score0.01946EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/09/08 12:00 a.m.•27 views

Python Interpreter Type Conversion DoS

The vulnerability of the Python interpreter is related to errors during the conversion of data types int and str. Exploiting this vulnerability can allow an attacker to trigger a service failure due to the computational complexity involved...

7.1CVSS7.2AI score0.04486EPSS
SaveExploits0References8Affected Software6
Slackware Linux
Slackware Linux
•added 2022/09/07 6:45 p.m.•55 views

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.14-i586-1slack15.0.txz: Upgraded. This is a security and bugfix release. gh-95778: Converting between int and str in bas...

7.5CVSS7AI score0.04486EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•28 views

Ubuntu: Security Advisory (USN-4517-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02356EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/14 1:59 a.m.•52 views

OpenStack Nova Denial of Service in network source security groups

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

4CVSS6.8AI score0.02105EPSS
SaveExploits1References8Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/14 1:08 a.m.•59 views

GHSA-9J7M-RJQX-48VH RubyGems Regular Expression Denial of Service vulnerability

Algorithmic complexity vulnerability in Gem::Version::VERSIONPATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service CPU...

4.3CVSS5.4AI score0.03331EPSS
SaveExploits0References15
Github Security Blog
Github Security Blog
•added 2022/05/13 1:07 a.m.•45 views

Uncontrolled Resource Consumption in Apache Commons Compress

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS5.8AI score0.12844EPSS
SaveExploits1References31Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/13 1:07 a.m.•58 views

GHSA-6FXM-66HQ-FC96 Uncontrolled Resource Consumption in Apache Commons Compress

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS6AI score0.12844EPSS
SaveExploits1References31
Github Security Blog
Github Security Blog
•added 2022/05/13 1:05 a.m.•43 views

Inefficient Algorithmic Complexity in Apache Santuario XML Security

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization...

4.3CVSS6.3AI score0.0593EPSS
SaveExploits1References28Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/02 3:47 a.m.•41 views

Django Regex Algorithmic Complexity Causes Denial of Service

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service CPU consumption via a crafted 1 EmailField email address or 2 URLField URL that triggers a large amount of backtracking in a regular...

5CVSS6.1AI score0.03717EPSS
SaveExploits0References14Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/02 3:47 a.m.•55 views

GHSA-P6M5-H7PP-V2X5 Django Regex Algorithmic Complexity Causes Denial of Service

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service CPU consumption via a crafted 1 EmailField email address or 2 URLField URL that triggers a large amount of backtracking in a regular...

8.7CVSS6.1AI score0.03717EPSS
SaveExploits0References14
GitLab Advisory Database
GitLab Advisory Database
•added 2022/05/02 12:00 a.m.•82 views

Django Regex Algorithmic Complexity Causes Denial of Service

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service CPU consumption via a crafted 1 EmailField email address or 2 URLField URL that triggers a large amount of backtracking in a regular...

5CVSS6.1AI score0.03717EPSS
SaveExploits0References10Affected Software1
CVE
CVE
•added 2022/01/19 12:20 a.m.•110 views

CVE-2022-22153

CVE-2022-22153 affects Junos OS flowd on SRX Series and MX Series with SPC3. A high-rate fragmented-traffic condition (fragmented packets > ~5%) can cause latency or packet loss due to insufficient algorithmic complexity and unthrottled resource allocation. Affected versions are prior to 18.2R...

7.5CVSS7.5AI score0.0093EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•4 views

CVE-2022-22153: Inefficient Algorithmic Complexity

An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit...

7.5CVSS5.8AI score0.0093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/12 12:00 a.m.•3 views

PT-2022-1468

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R3 Junos OS 18.3 versions prior to 18.3R3 Junos OS 18.4 versions prior to 18.4R2-S9, 18.4R3 Junos OS 19.1 versions prior to 19.1R2 Junos OS 19.2 versions prior to 19.2R1-S1, 19.2R2 Description The issue is relate...

7.8CVSS0.0093EPSS
SaveExploits0References5
NVD
NVD
•added 2021/10/21 8:15 p.m.•42 views

CVE-2021-41168

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vulnerable to denial of service attacks to its reference table implementation. References written in markdown referencename:...

6.5CVSS0.00791EPSS
SaveExploits1References2
Prion
Prion
•added 2021/10/21 8:15 p.m.•36 views

Design/Logic Flaw

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vulnerable to denial of service attacks to its reference table implementation. References written in markdown referencename:...

4CVSS6.3AI score0.00791EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder