Lucene search
+L

80 matches found

Github Security Blog
Github Security Blog
added 2021/06/16 5:56 p.m.61 views

Excessive Iteration Denial of Service in Apache PDFBox

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS4.1AI score0.02979EPSS
SaveExploits0References27Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the opj_t1_encode_cblks function in the OpenJPEG encoding and decoding library allows a attacker to cause a service failure.

The vulnerability of the opjt1encodecblks function in the OpenJPEG encoding and decoding library is related to excessive iteration. Exploiting this vulnerability may allow a malicious actor to cause service failures...

6.5CVSS6.4AI score0.02596EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
added 2020/09/18 7:31 a.m.38 views

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service DoS. The vulnerability exists as through an excessive iteration in the opjt1encodecblks function of openjp2/t1.c...

5.5CVSS3.6AI score0.02596EPSS
SaveExploits0References9Affected Software2
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.10 views

ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

6.5CVSS5.8AI score0.03166EPSS
SaveExploits1References4
OSV
OSV
added 2019/12/06 2:15 p.m.11 views

MGASA-2019-0365 Updated openjpeg2 packages fix security vulnerability

The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

5.5CVSS6.5AI score0.02596EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/12/06 2:15 p.m.53 views

Updated openjpeg2 packages fix security vulnerability

The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

5.5CVSS5.2AI score0.02596EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2019/11/05 9:18 p.m.14 views

openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

5.5CVSS5.8AI score0.01727EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2019/08/06 1:27 p.m.8 views

openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

5.5CVSS5.8AI score0.01727EPSS
SaveExploits1References4
OSV
OSV
added 2019/06/26 6:15 p.m.7 views

ALPINE-CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

5.5CVSS6.6AI score0.02596EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/26 6:15 p.m.37 views

CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

5.5CVSS5.8AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/03/11 12:00 a.m.41 views

Debian DSA-4405-1 : openjpeg2 - security update

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, that could be leveraged to cause a denial of service or possibly remote code execution. - CVE-2017-17480 Write stack-based buffer overflow in the jp3d and jpwl codecs can result in a denial of service or...

9.8CVSS7.3AI score0.05135EPSS
SaveExploits4References18
RedhatCVE
RedhatCVE
added 2018/04/06 2:52 a.m.37 views

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

6.5CVSS4.9AI score0.03166EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2018/03/30 12:00 a.m.33 views

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

6.5CVSS6.9AI score0.03166EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2018/01/27 3:29 p.m.25 views

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

5.5CVSS6.4AI score0.01031EPSS
SaveExploits0References2
NVD
NVD
added 2018/01/27 3:29 p.m.23 views

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

5.5CVSS5.3AI score0.01031EPSS
SaveExploits0References1
OSV
OSV
added 2018/01/27 3:29 p.m.18 views

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

5.5CVSS6.9AI score
SaveExploits0References1
Prion
Prion
added 2018/01/27 3:29 p.m.24 views

Design/Logic Flaw

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

4.3CVSS5.3AI score0.01031EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/01/27 3:00 p.m.93 views

CVE-2018-6352

PoDoFo 0.9.5 contains a denial-of-service vulnerability in the PdfParser::ReadObjectsInternal function (base/PdfParser.cpp) caused by excessive iteration on crafted PDF files. This affects PoDoFo 0.9.5 as described in CVE-2018-6352 and is reflected across multiple sources (NVD and CNVD entries). ...

5.5CVSS5.3AI score0.01031EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/01/27 3:00 p.m.35 views

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

5.3AI score0.01031EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2018/01/27 3:00 p.m.63 views

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

5.5CVSS5.4AI score0.01031EPSS
SaveExploits0
Rows per page
Query Builder