Lucene search
+L

7743 matches found

Positive Technologies
Positive Technologies
added 2021/12/01 12:00 a.m.13 views

PT-2021-6933 · Mediatek · Mediatek Mt8167 +48

Name of the Vulnerable Software and Affected Versions: alac decoder versions affected versions not specified MediaTek MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779,...

5.5CVSS5.1AI score0.00511EPSS
SaveExploits0References15
OSV
OSV
added 2021/12/01 12:00 a.m.20 views

ASB-A-201895896

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00538EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2021/11/30 8:44 a.m.13 views

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...

7.5CVSS7.4AI score0.05908EPSS
SaveExploits0References5
OSV
OSV
added 2021/11/19 11:04 a.m.5 views

OESA-2021-1435 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: In Apache MINA, a...

6.5CVSS8.3AI score0.04655EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/11/11 12:00 a.m.16 views

Mozilla Firefox Security Advisory (MFSA2015-53) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.8CVSS9.5AI score0.0218EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2021/11/10 4:40 p.m.11 views

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...

7.5CVSS7.4AI score0.05908EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/11/03 5:30 p.m.43 views

Infinite loop in Apache MINA

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS0.4AI score0.04655EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2021/11/01 1:10 p.m.55 views

CVE-2021-22564

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits1
OSV
OSV
added 2021/11/01 9:15 a.m.6 views

DEBIAN-CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS7.2AI score0.04655EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/01 9:15 a.m.20 views

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS0.04655EPSS
SaveExploits0References4
OSV
OSV
added 2021/11/01 9:15 a.m.24 views

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS6.9AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/11/01 9:15 a.m.5 views

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS6.9AI score0.04655EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/11/01 9:15 a.m.7 views

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS7AI score0.04655EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/01 9:15 a.m.11 views

UBUNTU-CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

6.5CVSS6.9AI score0.04655EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/11/01 8:35 a.m.48 views

CVE-2021-41973 Apache MINA HTTP listener DOS

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

7.5AI score0.04655EPSS
SaveExploits0References4
CVE
CVE
added 2021/11/01 8:35 a.m.177 views

CVE-2021-41973

CVE-2021-41973 affects Apache MINA, where a specially crafted HTTP request can cause the HTTP Header decoder to loop indefinitely, leading to a denial of service. The root cause is the decoder assuming headers begin at the buffer start and looping if extra data is present. Mitigation: upgrade MIN...

6.5CVSS6.4AI score0.04655EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2021/11/01 12:00 a.m.22 views

Python < 2.7.4, 3.2.x < 3.2.4 Vulnerability in the utf-16 decoder after error handling (bpo-14579) - Linux

Python is prone to a vulnerability in the UTF-16 decoder. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

6.4CVSS6.4AI score0.04549EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/01 12:00 a.m.10 views

Apache MINA 安全漏洞

Apache MINA is a web application framework from the Apache Foundation. A denial-of-service vulnerability exists in Apache MINA, which is caused by improper handling of HTTP message header requests in Apache MINA. An attacker could exploit this vulnerability to potentially cause an infinite loop i...

6.5CVSS7.7AI score0.04655EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:00 a.m.8 views

The vulnerability of the libavcodec/dnxhddec.c component in the FFmpeg multimedia library, related to an unvalidated return value, allows a hacker to trigger a service failure.

The vulnerability of the libavcodec/dnxhddec.c component in the FFmpeg multimedia library is related to an unvalidated return value of the initvlc function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

4.3CVSS6.5AI score0.01031EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:00 a.m.20 views

The vulnerability of the Media Audio Decoder decoder in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Media Audio Decoder driver for the Windows operating system is related to errors in code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS7.6AI score0.02027EPSS
SaveExploits0References3
Rows per page
Query Builder