Lucene search
K

21 matches found

RedHat Linux
RedHat Linux
added 2026/05/12 11:31 p.m.9 views

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

7.5CVSS5.8AI score0.00081EPSS
Exploits1References6
OSV
OSV
added 2026/02/25 10:16 p.m.2 views

DEBIAN-CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.3AI score0.00081EPSS
Exploits1References1
OSV
OSV
added 2026/02/25 10:16 p.m.1 views

UBUNTU-CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.8AI score0.00081EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2026/02/25 9:7 p.m.6 views

CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.2AI score0.00081EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2026/02/25 9:7 p.m.4 views

CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.9AI score0.00081EPSS
Exploits1References2
CVE
CVE
added 2026/02/25 9:7 p.m.86 views

CVE-2026-27951

CVE-2026-27951 — FreeRDP : The issue is an integer overflow in Stream_EnsureCapacity that can cause an endless blocking loop on 32‑bit systems with available physical memory ≥ SIZE_MAX. Affected: FreeRDP clients/servers prior to 3.23.0. Impact is a potential indefinite hang (availability). Patch ...

7.5CVSS5.3AI score0.00081EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2026/02/25 9:7 p.m.5 views

EUVD-2026-8755

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

5.3CVSS5.3AI score0.00081EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.3 views

PT-2026-22022

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description The Stream EnsureCapacity function in FreeRDP versions prior to 3.23.0 can create an endless blocking loop. This issue may affect all client and server implementations using FreeRDP. Exploitation is...

9.8CVSS5.1AI score0.00164EPSS
Exploits15References85
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-7698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation...

6.5CVSS6.4AI score0.00308EPSS
Exploits2References2
CNVD
CNVD
added 2022/10/09 12:0 a.m.14 views

Bento4 Ap4Array.h Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from excessive memory consumption in the AP4Array ::EnsureCapacity function in Core/Ap4Array.h. The vulnerability can be exploited to cause a...

5.5CVSS5.3AI score0.00088EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/09/30 4:42 a.m.9 views

CVE-2022-41845

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4Array::EnsureCapacity in Core/Ap4Array.h...

5.5AI score0.00088EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2022/09/30 12:0 a.m.28 views

CVE-2022-41845

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4Array::EnsureCapacity in Core/Ap4Array.h...

5.5CVSS6.1AI score0.00088EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.2 views

PT-2022-26095 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue in Bento4 leads to excessive memory consumption in the AP4 Array::EnsureCapacity function, located in Core/Ap4Array.h. Recommendations: For Bento4 version 1.6.0-639, consider applying a patch or...

5.5CVSS5.2AI score0.00088EPSS
Exploits1References7
OSV
OSV
added 2022/06/27 6:15 p.m.0 views

UBUNTU-CVE-2021-40941

In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4Array::EnsureCapacity in Ap4Array.h:172, as demonstrated by GPAC. This can cause a denial of service DOS...

7.5CVSS5.8AI score0.00334EPSS
Exploits1References2
CNVD
CNVD
added 2019/02/11 12:0 a.m.0 views

Bento4 Excessive Memory Allocation Attempt Vulnerability (CNVD-2019-28481)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An excessive memory allocation attempt vulnerability exists in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627, which can be exploited to cause an out-of-memory condition via specially crafted MP4 input...

6.5CVSS6.9AI score0.00284EPSS
Exploits1References1
OSV
OSV
added 2019/02/10 10:29 p.m.1 views

UBUNTU-CVE-2019-7698

An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...

6.5CVSS6.6AI score0.00284EPSS
Exploits1References3
CNVD
CNVD
added 2018/12/17 12:0 a.m.2 views

Unspecified Vulnerability in Bento4

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the EnsureCapacity method of the Core/Ap4Array.h file in Bento4 version 1.5.1-627. An attacker can exploit the vulnerability to allocate a large amount of memory with the help of specially...

6.5CVSS6.8AI score0.00308EPSS
Exploits1References1
OSV
OSV
added 2018/12/12 10:29 a.m.0 views

UBUNTU-CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

6.5CVSS6.6AI score0.00308EPSS
Exploits1References3
NVD
NVD
added 2018/12/12 10:29 a.m.8 views

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

6.5CVSS6.4AI score0.00308EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/12/12 8:0 a.m.12 views

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

6.4AI score0.00308EPSS
Exploits1References1
Rows per page
Query Builder