GHSA-P25M-JPJ4-QCRR Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

DEBIAN-CVE-2023-4785

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

AZL-34772 CVE-2023-4785 affecting package grpc for versions less than 1.62.0-2

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

UBUNTU-CVE-2023-4785

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

PT-2023-30643

Name of the Vulnerable Software and Affected Versions gRPC versions 1.23 and later Description The issue is related to a lack of error handling in the TCP server in Google's gRPC, which allows an attacker to cause a denial of service by initiating a significant number of connections with the...

GCC Security Vulnerabilities

GCC is a collection of GNU compilers. It is primarily used to compile the C and C++ languages. A security vulnerability exists in GCC, which stems from the presence of a buffer overflow that could lead to an uncontrolled loss of availability or further compromise confidentiality or integrity...

Vulnerability of PHP, C++, Swift, and Node.js drivers of the MongoDB database management system, related to the exposure of protected information, allowing attackers to gain unauthorized access to protected information.

Vulnerabilities in PHP, C++, Swift, and Node.js drivers of the MongoDB database management system, as well as the PHP programming language interpreter, can lead to the exposure of protected information. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected...

USN-6307-1 cjose vulnerability

It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service system crash or might expose sensitive information...

PT-2023-21750 · Tigergraph · Tigergraph Enterprise

Name of the Vulnerable Software and Affected Versions: Tigergraph Enterprise version 3.7.0 Description: An issue was discovered in the TigerGraph platform, which allows users to define new User Defined Functions UDFs from C/C++ code. This functionality enables users to upload custom C/C++ code,...

PT-2023-4885

Name of the Vulnerable Software and Affected Versions gRPC versions prior to v1.53 Description The issue is related to the gRPC C++ implementation, where certain headers can cause an abort to be called when sent via http2. The affected headers include te: x where x is not trailers, :scheme: x whe...

cpp-httplib 注入漏洞

cpp-httplib is an HTTP/HTTPS server and client library written in C++. A security vulnerability exists in cpp-httplib versions prior to 0.12.4 that stems from vulnerability to CRLF injection, which can lead to logic errors and other misbehavior...

DEBIAN-CVE-2023-31038

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

Unified Automation OPC UA C++ Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted certificate that can...

Unified Automation OPC UA C++Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted OPC UA message that can...

PT-2023-12847 · Intel · Intel Oneapi Toolkit +1

Name of the Vulnerable Software and Affected Versions: IntelR C++ Compiler Classic versions prior to 2021.6 IntelR oneAPI Toolkits versions prior to 2022.2 Description: The issue is related to improper handling of Unicode encoding in source code compiled by the IntelR C++ Compiler Classic. This m...

SUSE CVE-2008-4482

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...

SUSE CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

SUSE CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

SUSE CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

SUSE CVE-2018-18484

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplusdemangletype, dbarefunctiontype,...