Lucene search
+L

661 matches found

Github Security Blog
Github Security Blog
added 2025/03/31 9:47 p.m.23 views

Netty QUIC hash collision DoS attack

An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. See...

5.3CVSS6.9AI score0.00545EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/03/31 7:15 p.m.30 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.00545EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/31 6:43 p.m.6 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS7.1AI score0.00545EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/31 6:43 p.m.42 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.00545EPSS
SaveExploits0References3
CVE
CVE
added 2025/03/31 6:43 p.m.81 views

CVE-2025-29908

CVE-2025-29908 affects the Netty QUIC codec (netty-incubator-codec-quic) which uses quiche. The issue is a hash collision in the hash map that manages connections, allowing a remote attacker to induce a Hash DoS by initiating connections with colliding Source Connection IDs (SCIDs), causing consi...

5.3CVSS5.2AI score0.00545EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/31 6:43 p.m.10 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS6.6AI score0.00545EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.8 views

Netty QUIC codec 安全漏洞

Netty QUIC codec is a new experimental QUIC codec for Netty open source. A security vulnerability exists in versions prior to Netty QUIC codec 0.0.71.Final, which stems from a hash collision vulnerability that could lead to excessive server CPU load...

5.3CVSS6.3AI score0.00545EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/03/20 12:32 p.m.16 views

SageMaker Workflow component allows possibility of MD5 hash collisions

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS6.8AI score0.00245EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/03/20 10:15 a.m.27 views

CVE-2025-0508

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS0.00245EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/20 10:11 a.m.7 views

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS5.7AI score0.00245EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/20 10:11 a.m.40 views

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS0.00245EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/20 10:11 a.m.14 views

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS6.2AI score0.00245EPSS
SaveExploits0References4
Huntr
Huntr
added 2025/03/07 1:35 p.m.6 views

MD5 Hash Collision Causes Overwriting of Papers with the Same Title, Leading to Data Loss

Description The ArxivReader class in LlamaIndex is responsible for searching for papers on ArXiv, downloading them, and processing them for AI model training. The workflow of ArxivReader is as follows: 1. The user searches for a specific topic on ArXiv, retrieving a list of relevant papers. impor...

5.3CVSS6.6AI score0.00281EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2012-0840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions...

5CVSS7.2AI score0.43346EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2013-7040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the abili...

4.3CVSS6.9AI score0.03255EPSS
SaveExploits0References4
Veracode
Veracode
added 2025/02/25 5:39 a.m.9 views

Hash Collision Attack

tech.kwik, kwik is vulnerable to Hash collision attack. The vulnerability is due to a hash collision in the connection management hash table, allowing remote attackers to cause high CPU load via colliding Source Connection IDs SCIDs...

5.3CVSS6.7AI score0.00558EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/22 12:26 a.m.10 views

CVE-2025-23020

An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...

5.3CVSS6.8AI score0.00558EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/22 12:26 a.m.7 views

CVE-2025-24947

A hash collision vulnerability in the hash table used to manage connections in LSQUIC aka LiteSpeed QUIC before 4.2.0 allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. This is caused by...

5.3CVSS6.9AI score0.00649EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/02/20 3:32 a.m.13 views

Kwik hash collision vulnerability

An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...

5.3CVSS5.2AI score0.00558EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/02/20 3:32 a.m.8 views

GHSA-9F57-9RHG-4HVM Kwik hash collision vulnerability

An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...

5.3CVSS5.3AI score0.00558EPSS
SaveExploits0References5
Rows per page
Query Builder