Lucene search
+L

5381 matches found

Cvelist
Cvelist
added 2021/09/10 1:3 a.m.33 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.7AI score0.05566EPSS
SaveExploits0References7
CVE
CVE
added 2021/09/10 1:3 a.m.149 views

CVE-2021-40839

CVE-2021-40839 affects the rencode package for Python up to 1.0.6, where an infinite loop in typecode decoding (e.g., via ;\x2f\x7f) enables a remote CPU/memory‑consuming attack. The vulnerability is documented across multiple advisories and vendor notes; several distributions issued patches (e.g...

7.5CVSS7.3AI score0.05566EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2021/09/10 1:3 a.m.53 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.5AI score0.05566EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/09/10 12:0 a.m.7 views

PT-2021-22973 · Pypi +2 · Encode +2

Name of the Vulnerable Software and Affected Versions: rencode package through 1.0.6 for Python Description: The issue allows an infinite loop in typecode decoding, such as via ;x2fx7f, enabling a remote attack that consumes CPU and memory. Recommendations: For rencode package versions through...

8.7CVSS7AI score0.05566EPSS
SaveExploits0References30
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.12 views

Github rencode安全漏洞

Github rencode is the encode module similar to bencode in the BitTorrent project. r encoding takes significantly less space than b encoding for complex heterogeneous data structures with many small elements. A security vulnerability exists in version 1.0.6 and earlier of the rencode package, whic...

7.5CVSS7.4AI score0.05566EPSS
SaveExploits0References7
OSV
OSV
added 2021/09/08 11:21 a.m.8 views

USN-5065-1 openvswitch vulnerability

It was discovered that Open vSwitch incorrectly handled decoding RAWENCAP actions. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...

5.5CVSS7.4AI score0.0118EPSS
SaveExploits0References2
Redos
Redos
added 2021/09/08 12:0 a.m.33 views

ROS-2-591

2.591 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

8.7AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:0 a.m.25 views

ROS-2-952

2.952 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.02662EPSS
SaveExploits1
Redos
Redos
added 2021/09/08 12:0 a.m.17 views

ROS-2-674

2.674 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS9.4AI score0.19582EPSS
SaveExploits3
Redos
Redos
added 2021/09/08 12:0 a.m.12 views

ROS-2-1298

2.1298 Multiple vulnerabilities of libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.99295EPSS
SaveExploits83
Redos
Redos
added 2021/09/08 12:0 a.m.16 views

ROS-2-1286

2.1286 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:0 a.m.25 views

ROS-2-1518

2.1518 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

8.7AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:0 a.m.12 views

ROS-2-1469

2.1469 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.6AI score0.99295EPSS
SaveExploits83
Redos
Redos
added 2021/09/08 12:0 a.m.16 views

ROS-2-1414

2.1414 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.6AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:0 a.m.38 views

ROS-2-649

2.649 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

8.7AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:0 a.m.12 views

ROS-2-1397

2.1397 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.10047EPSS
SaveExploits2
Veracode
Veracode
added 2021/09/02 6:59 p.m.28 views

Denial Of Service

gpac is vulnerable to denial of service. The vulnerability exists due to an exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library...

8.8CVSS4.7AI score0.01695EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2021/09/02 6:40 p.m.20 views

Denial Of Service (DoS)

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...

8.8CVSS4.6AI score0.01656EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2021/09/02 6:40 p.m.25 views

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The striboxread function is used when processing atoms using the 'stri' FOURCC code. An attacke...

8.8CVSS4.1AI score0.01601EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2021/09/02 6:31 p.m.22 views

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input can cause an improper...

8.8CVSS3.7AI score0.01632EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder