Lucene search
+L

960 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2018-12698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - demangletemplate in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption aka OOM during t...

7.5CVSS7.1AI score0.06606EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2017-15996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other...

7.8CVSS8AI score0.02377EPSS
SaveExploits0References3
Veracode
Veracode
•added 2025/02/28 2:37 a.m.•17 views

Denial Of Service (DoS)

github.com/go-jose/go-jose is vulnerable to Denial Of Service DoS. The vulnerability is due to improper token parsing using strings.Splittoken, ".", which fails to limit the number of splits, allowing attackers to create excessively large token segments that consume excessive memory...

8.7CVSS6.7AI score0.00399EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2025/02/24 10:49 p.m.•36 views

DoS in go-jose Parsing

Impact When parsing compact JWS or JWE input, go-jose could use excessive memory. The code used strings.Splittoken, "." to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of '.' characters. An attacker could...

8.7CVSS7.1AI score0.00399EPSS
SaveExploits0References7Affected Software3
Debian CVE
Debian CVE
•added 2025/02/24 10:22 p.m.•46 views

CVE-2025-27144

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

8.7CVSS6.7AI score0.00399EPSS
SaveExploits0
Mend
Mend
•added 2025/02/20 7:04 p.m.•2 views

CVE-2025-26618

Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availability. OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang. Packet si...

7CVSS0.00494EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/02/05 12:09 a.m.•17 views

CVE-2024-4140

An excessive memory use issue CWE-770 exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set from 2020 and 2024 limits excessive depth and the total number of parts...

7.5CVSS6.7AI score0.01132EPSS
SaveExploits0References1
Veracode
Veracode
•added 2025/01/23 5:13 a.m.•14 views

Excessive Memory Consumption

github.com/t2bot/matrix-media-repo is vulnerable to Excessive Memory Consumption. The vulnerability is due to inadequate handling of large JSON responses, allowing an attacker to exhaust system memory and potentially crash the application...

7.5CVSS6.6AI score0.00755EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•10 views

PT-2025-30831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where insufficient validation of the RAS header read from EEPROM could lead to excessive memory allocation when the header is corrupted. This can occur...

6CVSS6.6AI score0.00167EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/12/13 12:00 a.m.•13 views

CBL Mariner 2.0 Security Update: binutils (CVE-2022-48063)

The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48063 advisory. - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the...

5.5CVSS5.8AI score0.00464EPSS
SaveExploits1References2
NVD
NVD
•added 2024/11/25 2:15 p.m.•33 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS0.00603EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/25 2:15 p.m.•9 views

DEBIAN-CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS6.6AI score0.00603EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/25 1:08 p.m.•31 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS7.3AI score0.00603EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/25 1:08 p.m.•59 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS0.00603EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/25 1:08 p.m.•122 views

CVE-2024-11498

CVE-2024-11498 affects the libjxl (JPEG XL) library. A crafted file can trigger a stack-based overflow, causing the decoder to allocate large stack space (up to 256–512 MB) and potentially exhaust stack memory, leading to denial of service. Multiple advisories and deployable updates reference thi...

7.5CVSS6.9AI score0.00603EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2024/11/25 1:08 p.m.•34 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS7.4AI score0.00603EPSS
SaveExploits0
Mend
Mend
•added 2024/11/20 8:50 p.m.•4 views

CVE-2024-52581

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to version 2.13.0, the multipart form parser shipped with litestar expects the entire request body as a single byte string and there is no default limit for the total size of the request body. This allows an attacker to...

8.6CVSS0.00794EPSS
SaveExploits1References10
Veracode
Veracode
•added 2024/11/13 10:50 a.m.•13 views

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

5.5CVSS6.6AI score0.00325EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2024/11/03 10:10 a.m.•2 views

WS-2022-0171

DOS and excessive memory usage when passing untrusted user input to to dag import before 0.13.1...

7.1CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2024/10/31 3:59 p.m.•58 views

CVE-2024-50354 Out-of-memory during deserialization with crafted inputs

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory...

5.5CVSS0.00325EPSS
SaveExploits1References3
Rows per page
Query Builder