CVE-2021-28095

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32...

CVE-2021-28095

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32...

CVE-2021-28095

OX Documents prior to 7.10.5-rev5 contains an Incorrect Access Control flaw for documents containing XML structures, allowing hash collisions due to the use of CRC32. Affects Open-Xchange OX Documents; CVE-2021-28095. No exploitation details are provided in the supplied documents. Remediation sta...

CVE-2021-28093

OX Documents before 7.10.5-rev5 has an Incorrect Access Control of converted images due to hash collisions from Adler32. Root cause: Adler32-based hashing can collide, enabling access control bypass. Impact: partial confidentiality/integrity concerns with converted images; CVSS metrics indicate M...

CVE-2021-28093

OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due to use of Adler32...

CVE-2021-28094

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32...

CVE-2021-28094

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents due to hash collisions from CRC32. Affected product: Open-Xchange OX Documents (pre-7.10.5-rev7). Root cause: CRC32-based hash collisions lead to improper access control. Impact: described as an access control is...

Arch Linux 资源管理错误漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. Arch Linux suffers from a Resource Management Error vulnerability that stems from improper internal resource management in naive's keyless hash function. A remot...

SUSE: Security Advisory (SUSE-SU-2018:3156-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-12078 · Github.Com/Robotsandpencils/Go Saml +2 · Github.Com/Robotsandpencils/Go-Saml +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns XML Digital Signatures that use SHA-1 for generation and validation. This may allow an attacker to craft inputs that cause hash...

python3 security update

3.6.8-18.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-18 - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and IPv6Interface CVE-2020-14422 Resolves: rhbz1854926...

python3 security and bug fix update

3.6.8-31.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-31 - Avoid infinite loop when reading specially crafted TAR files CVE-2019-20907 Resolves: rhbz1856481 - Resolve hash collisions for Pv4Interface and IPv6Interface CVE-2020-14422 Resolves: rhbz1854926 3.6.8-30 -...

Fedora 32 : python34 (2020-d30881c970)

CVE-2019-20907: Avoid infinite loop in the tarfile module - CVE-2020-14422: Resolve hash collisions for IPv4Interface and IPv6Interface - CVE-2020-26116: HTTP request method CRLF injection in httplib This update brings Fedora 32's python34 in sync with the EPEL7 package. Note that Tenable Network...

Updated python-ipaddress package fixes security vulnerability

Hash collisions in IPv4Interface and IPv6Interface could lead to DOS CVE-2020-14422...

FreeBSD : Python -- multiple vulnerabilities (3fcb70a4-e22d-11ea-98b2-080027846a02)

Python reports : bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded CVE-2020-15523. bpo-41004: CVE-2020-14422: The hash methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This...

SUSE-SU-2020:2216-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2019-20907, bsc1174091: avoiding possible infinite loop in specifically crafted tarball. - CVE-2020-14422, bsc1173274: where hash collisions in IPv4Interface and IPv6Interface could lead to DOS...

openSUSE Security Update : python-ipaddress (openSUSE-2020-1002)

This update for python-ipaddress fixes the following issues : - Add CVE-2020-14422-ipaddress-hash-collision.patch fixing CVE-2020-14422 bsc1173274, bpo41004, where hash collisions in IPv4Interface and IPv6Interface could lead to DOS. This update was imported from the SUSE:SLE-15:Update update...

PSF-2020-3 [CVE-2020-14422] Hash collisions in IPv4Interface and IPv6Interface

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as it was found that the hashing routine used by PHP arrays was susceptible to predictable hash collisions. If an HTTP POST request to a PHP application contained many parameters whose names map to the same hash value, a large...