Hitachi Energy's RTU500 Series Product (UPDATE B)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Hitachi Energy Equipment : RTU500 Series Vulnerabilities : Type Confusion, Observable Timing Discrepancy, Out-of-bounds Read, Infinite Loop, Classic Buffer Overflow 2. RISK EVALUATION...

Undertow: Infinite loop in SslConduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

Important: Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.3 security update

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

DEBIAN-CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

Design/Logic Flaw

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

UBUNTU-CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

PT-2023-22626 · Unknown +1 · Webassembly +1

Name of the Vulnerable Software and Affected Versions: WebAssembly version 1.0 Description: An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. Recommendations: For WebAssembly version 1.0, consider disabling the hang.wasm component as a temporary workaround until a...

CVE-2023-30300

CVE-2023-30300 describes an infinite loop in the hang.wasm component of WebAssembly 1.0. The issue is documented across multiple sources (NVD, OSV, Debian/Ubuntu OSSVs, Fedora/Nessus plugins) with a common root cause: hang.wasm causes unbounded execution, leading to availability impact. CVSS 3.1 ...

CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

Important: golang

Issue Overview: Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CVE-2022-23772 cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This...

CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

CVE-2023-30300

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...

SUSE-SU-2023:0879-2 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc bsc1185000. - CVE-2020-14394: Fixed infinite loop in xhciringchainlength bsc1180207...

Amazon Linux AMI : golang (ALAS-2023-1731)

The version of golang installed on the remote host is prior to 1.18.6-1.43. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1731 advisory. Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working...

Important: golang

Issue Overview: Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value. After fix, ReverseProxy...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an infinite loop via integer overflows when calling any of the Parse functions which contain //line directives with very large line numbers, which can cause the application to crash...

CVE-2015-10103

A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/settings.js. The manipulation of the argument setForgetTime with the input 0 leads to infinite loop. It is possible to launch the attack on the loca...