397 matches found
PT-2025-41107
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM component related to nested TSC scaling support in nSVM. Instead of asserting that TSC scaling is exposed to L1 if L1's MSR AMD64 TSC RATI...
nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS
A flaw was found in nodejs-handlebars, where affected versions of handlebars are vulnerable to a denial of service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This flaw allows attackers to exhaust system resources, leading to a denial of...
CVE-2023-25824
Modgnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 including did not properly fail blocking read operations on TLS connections when the transport hit timeouts. Instead it entered an endless loop retrying the read operation, consuming CPU resources. This coul...
K51753557: PHP vulnerability CVE-2015-9253
Security Advisory Description An issue was discovered in PHP through 7.2.2. The php-fpm master process restarts a child process in an endless loop when using program execution functions e.g., passthru, exec, shellexec, or system with a non-blocking STDIN stream, causing this master process to...
SUSE CVE-2018-10316
Netwide Assembler NASM 2.14rc0 has an endless while loop in the assemblefile function of asm/nasm.c because of a globallineno integer overflow...
SUSE CVE-2019-0205
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...
SUSE CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2022-2890)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate...
EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2022-2872)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate...
Moderate: Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update
Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which giv...
dnsmasq security and bug fix update
2.85-5 - Prevent endless loop in forwardquery 2120711 2.85-4 - Prevent use after free in dhcp6norelay CVE-2022-0934...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
Design/Logic Flaw
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Technical details about CVE-2022-2833 are not publicly available in the provided documents. Monitor for updates from vendors/security advisories.
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-35724
CVE-2022-35724 affects Rust applications using the Apache Avro Rust SDK prior to 0.14.0. The issue allows crafted input data to cause the reader to loop in cycles, consuming CPU and enabling denial of service. The fix is upgrading to apache-avro version 0.14.0 (or later). No exploitation details ...