CVE-2020-35139

An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...

PT-2023-11791

Name of the Vulnerable Software and Affected Versions Faucet SDN Ryu version 4.34 Description An issue was discovered in OFPBundleCtrlMsg in parser.py, allowing remote attackers to cause a denial of service DoS through an infinite loop. Recommendations For Faucet SDN Ryu version 4.34, consider...

CLSA-2023-1691606420 samba: Fix of 2 CVEs

CVE-2022-2127: Fix oud-of-bounds read triggered by maliciously request - CVE-2023-34966: Fix infinite loop vulnerability in mdssvc RPC service...

CLSA-2023-1691577351 samba: Fix of 2 CVEs

CVE-2022-2127: Fix oud-of-bounds read triggered by maliciously request - CVE-2023-34966: Fix infinite loop vulnerability in mdssvc RPC service...

CLSA-2023-1691576572 Fix CVE(s): CVE-2023-34966

SECURITY UPDATE: infinite loop vulnerability in mdssvc RPC service for Spotlight - debian/patches/CVE-2023-34966.patch: prevents an infinite loop by preventing subcount less than 1. Add test for addressed CVE. - CVE-2023-34966...

CLSA-2023-1691576181 Fix CVE(s): CVE-2023-34966

SECURITY UPDATE: infinite loop vulnerability in mdssvc RPC service for Spotlight - debian/patches/CVE-2023-34966.patch: prevents an infinite loop by preventing subcount less than 1. Add test for addressed CVE. - CVE-2023-34966...

Denial Of Service (DoS)

wireshark is vulnerable to Denial of Service DoS attacks. Infinite loop in GDSDB allows a remote attacker to cause denial of service conditions via packet injection or crafted capture file...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop when an authenticated user with specific rights access a MR having source and target branch pointing to each other, leading to crash the application...

Information Disclosure

samba is vulnerable to Information Disclosure. This vulnerability occurs when samba parses a specially crafted RPC request. If the request is valid, samba could enter an infinite loop, allowing a malicious client or an attacker to view the information that is part of the disclosed path...

Denial Of Service (DoS)

redis is vulnerable to Denial of Service DoS attacks. This vulnerability occurs when a replica sends a specially crafted message to the master. If the message is valid, the master could be tricked into entering an infinite loop. This could prevent the master from serving requests from other...

Fedora 37 : samba (2023-bcd91bfcd3)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-bcd91bfcd3 advisory. Update to version 4.17.10, Security fixes for CVE-2022-2127, CVE-2023-3347, CVE-2023-34966, CVE-2023-34967 and CVE-2023-34968 ---- Fix netlogon...

FreeBSD : samba -- multiple vulnerabilities (441e1e1a-27a5-11ee-a156-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 441e1e1a-27a5-11ee-a156-080027f5fec9 advisory. - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in...

[slackware-security] samba

New samba packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/samba-4.18.5-i586-1slack15.0.txz: Upgraded. PLEASE NOTE: We are taking the unusual step of moving to the latest Samba branch because...

PT-2023-8396 · Edk2 +11 · Edk2 +11

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to an infinite loop vulnerability in EDK2's Network Package when parsing a PadN option in the Destination Options header of IPv6. This can be exploited by an attacker to...

The vulnerability of the `usb_giveback_urb` function in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the usbgivebackurb function in Linux operating systems is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to cause a service failure...

Samba 4.16.x < 4.16.10 / 4.17.x < 4.17.9 / 4.18.x < 4.18.4 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.16.x prior to 4.16.10, 4.17.x prior to 4.17.9, or 4.18.x prior to 4.18.4. It is, therefore, potentially affected by multiple vulnerabilities, including the following: - An out-of-bounds read error was found in Samba due to insufficient length...

SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:3060-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3060-1 advisory. - CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend bsc1213174. - CVE-2023-34966: Fixe...

DEBIAN-CVE-2023-4010

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usbgivebackurb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descripto...

UBUNTU-CVE-2023-4010

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usbgivebackurb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descripto...

CVE-2023-4010 Kernel: usb: hcd: malformed usb descriptor leads to infinite loop in usb_giveback_urb()

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usbgivebackurb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descripto...