Lucene search
+L

3749 matches found

Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•9 views

PT-2023-7997

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description A flaw in oFono, an Open Source Telephony on Linux, is related to a stack overflow bug triggered within the decode submit report function during SMS decoding in PDU format. This issue may allow...

8.1CVSS7.5AI score0.01149EPSS
SaveExploits1References65
RedHat Linux
RedHat Linux
•added 2023/05/09 10:03 a.m.•13 views

golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...

7.5CVSS6.6AI score0.02484EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2023/05/09 10:03 a.m.•16 views

golang: encoding/gob: stack exhaustion in Decoder.Decode

A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

7.5CVSS6.6AI score0.01696EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/05/09 9:51 a.m.•14 views

golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...

7.5CVSS6.6AI score0.02484EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/05/04 12:00 a.m.•12 views

PT-2023-22509 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.15.0-0 Description: A segment fault with Null Pointer Dereference occurs in the process of decoding subinfo decode and unsubinfo decode. This issue is related to the decoding process, which can lead to a crash. Recommendation...

7.5CVSS6.9AI score0.00845EPSS
SaveExploits1References5
NVD
NVD
•added 2023/05/02 6:15 a.m.•38 views

CVE-2022-34144

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

7.5CVSS7.5AI score0.00383EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/02 6:15 a.m.•27 views

Authentication flaw

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

5CVSS7.5AI score0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/02 5:08 a.m.•91 views

CVE-2022-34144

CVE-2022-34144 is a Transient Denial of Service arising from a reachable assertion in the Modem during OSI decode scheduling. Documented across NVD/Red Hat/PRION/vuln enrichment entries, the issue targets a Modem component (Qualcomm-based ecosystems) and is rated High (CVSS 3.1: 7.5) with network...

7.5CVSS7.5AI score0.00383EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/02 5:08 a.m.•50 views

CVE-2022-34144 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

7.5CVSS7.7AI score0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/02 5:08 a.m.•22 views

CVE-2022-34144 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

7.5CVSS6.9AI score0.00383EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/02 12:00 a.m.•1 views

CVE-2022-34144: Reachable Assertion

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

7.5CVSS5.8AI score0.00383EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/02 12:00 a.m.•17 views

PT-2023-13342 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem during OSI decode scheduling. Recommendations: At the moment, there is no information about a newer version...

7.5CVSS6.8AI score0.00383EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2023/04/28 11:44 a.m.•52 views

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to [CVE-2022-38900]

Summary Node.js module decode-uri-component is part of the Node.js runtime used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service. This bulletin provides patch information to address the reported...

7.5CVSS6.8AI score0.23789EPSS
SaveExploits1Affected Software1
Fedora
Fedora
•added 2023/04/22 1:12 a.m.•80 views

[SECURITY] Fedora 36 Update: ffmpeg-5.0.3-1.fc36

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

8.1CVSS7.8AI score0.01512EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/04/22 12:00 a.m.•11 views

PT-2023-35789 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. It occurs in the unicode decode utf8 function, which is called by PyUnicode DecodeUTF8 and PyPegen formatted value. Recommendations...

6.7AI score
SaveExploits0References2
OSV
OSV
•added 2023/04/15 10:15 p.m.•8 views

DEBIAN-CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

7.5CVSS7.6AI score0.01142EPSS
SaveExploits0References1
Fedora
Fedora
•added 2023/04/13 1:53 a.m.•52 views

[SECURITY] Fedora 37 Update: ffmpeg-5.1.3-1.fc37

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

8.1CVSS8.1AI score0.01512EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2023/04/13 12:00 a.m.•46 views

CentOS 8 : nodejs:14 (CESA-2023:1743)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:1743 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...

8.6CVSS7AI score0.23789EPSS
SaveExploits4References8
RedHat Linux
RedHat Linux
•added 2023/04/12 3:10 p.m.•12 views

decode-uri-component: improper input validation resulting in DoS

A flaw was found in decode-uri-component. This issue occurs due to a specially crafted input, resulting in a denial of service...

7.5CVSS7.1AI score0.23789EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2023/04/12 3:04 p.m.•8 views

decode-uri-component: improper input validation resulting in DoS

A flaw was found in decode-uri-component. This issue occurs due to a specially crafted input, resulting in a denial of service...

7.5CVSS7.1AI score0.23789EPSS
SaveExploits1References6
Rows per page
Query Builder