Lucene search
+L

6778 matches found

OSS-Fuzz
OSS-Fuzz
•added 2021/09/10 5:09 p.m.•10 views

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5403113081143296 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasani386libavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

5.9AI score
SaveExploits0
NVD
NVD
•added 2021/09/10 2:15 a.m.•26 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS0.0552EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2021/09/10 2:15 a.m.•9 views

DEBIAN-CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.4AI score0.0552EPSS
SaveExploits0References1
PyPA
PyPA
•added 2021/09/10 2:15 a.m.•18 views

PYSEC-2021-345

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7AI score0.0552EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2021/09/10 2:15 a.m.•31 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.1AI score0.0552EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2021/09/10 2:15 a.m.•13 views

UBUNTU-CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS5.8AI score0.0552EPSS
SaveExploits0References6
osv_pysec
osv_pysec
•added 2021/09/10 2:15 a.m.•19 views

PYSEC-2021-345

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS5.9AI score0.0552EPSS
SaveExploits0References5
Prion
Prion
•added 2021/09/10 2:15 a.m.•35 views

Code injection

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

5CVSS7.4AI score0.0552EPSS
SaveExploits0References7Affected Software2
attackerkb
attackerkb
•added 2021/09/10 2:15 a.m.•13 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.1AI score0.0552EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2021/09/10 1:03 a.m.•65 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.5AI score0.0552EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/09/10 1:03 a.m.•49 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.7AI score0.0552EPSS
SaveExploits0References7
CVE
CVE
•added 2021/09/10 1:03 a.m.•166 views

CVE-2021-40839

CVE-2021-40839 affects the rencode package for Python up to 1.0.6, where an infinite loop in typecode decoding (e.g., via ;\x2f\x7f) enables a remote CPU/memory‑consuming attack. The vulnerability is documented across multiple advisories and vendor notes; several distributions issued patches (e.g...

7.5CVSS7.3AI score0.0552EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2021/09/10 12:00 a.m.•13 views

PT-2021-22973

Name of the Vulnerable Software and Affected Versions rencode package through 1.0.6 for Python Description The issue allows an infinite loop in typecode decoding, such as via ;x2fx7f, enabling a remote attack that consumes CPU and memory. Recommendations For rencode package versions through 1.0.6...

8.7CVSS7AI score0.0552EPSS
SaveExploits0References28
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/10 12:00 a.m.•6 views

CVE-2021-40839: Loop with Unreachable Exit Condition

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS5.8AI score0.0552EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/10 12:00 a.m.•25 views

Github Rencode security vulnerability

Github rencode is the encode module similar to bencode in the BitTorrent project. r encoding takes significantly less space than b encoding for complex heterogeneous data structures with many small elements. A security vulnerability exists in version 1.0.6 and earlier of the rencode package, whic...

7.5CVSS7.4AI score0.0552EPSS
SaveExploits0References7
osv_usn
osv_usn
•added 2021/09/08 11:21 a.m.•20 views

USN-5065-1 openvswitch vulnerability

It was discovered that Open vSwitch incorrectly handled decoding RAWENCAP actions. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...

5.5CVSS6.8AI score0.0118EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2021/09/08 6:13 a.m.•10 views

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Publish

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5461854328061952 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/09/08 12:12 a.m.•8 views

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttDecode_Vbi

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6423182999945216 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62100001370d...

5.9AI score
SaveExploits0
Redos
Redos
•added 2021/09/08 12:00 a.m.•18 views

ROS-2-1397

2.1397 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS7.8AI score0.09966EPSS
SaveExploits2
Redos
Redos
•added 2021/09/08 12:00 a.m.•22 views

ROS-2-1414

2.1414 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS7.5AI score0.02662EPSS
SaveExploits0
Rows per page
Query Builder