Flickr: High resource consumption by insufficient sanitization of forum threads pagination

The forum threads pagination functionality was insufficiently sanitized, leading to high resource consumption. When a page number was provided in the URL that exceeded the number of available pages, an infinite loop was triggered, generating excessive markup on each iteration. The issue was...

Denial Of Service (DoS)

Apache Sling Resource Merger is vulnerable to Denial of Service DoS. The vulnerability is due to a faulty iteration logic in the function getRelativePath in MergedResourceProvider, triggering an infinite loop and consuming excessive CPU memory, possibly leading to a system crash...

SUSE-SU-2023:0879-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc bsc1185000. - CVE-2020-14394: Fixed infinite loop in xhciringchainlength bsc1180207...

Low: zziplib

Issue Overview: Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzipfileread" in the function "unzzipcatfile". CVE-2020-18442 Affected Packages: zziplib Issue Correction: Run dnf update zziplib --releasever 2023.0.20230322 or dnf update...

Amazon Linux 2023 : php8.1, php8.1-bcmath, php8.1-cli (ALAS2023-2023-081)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-081 advisory. A vulnerability was found in php. This issue occurs due to memory corruption in the finfobuffer function and a bad patch of the libmagic library. This flaw allows an attacker or malicious actor...

Amazon Linux 2023 : libXpm, libXpm-devel (ALAS2023-2023-107)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-107 advisory. A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Deni...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-038)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-038 advisory. A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted...

EulerOS 2.0 SP10 : byacc (EulerOS-SA-2023-1545)

According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...

EulerOS 2.0 SP10 : byacc (EulerOS-SA-2023-1520)

According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

...

Red Hat JBoss Enterprise Application Platform 安全漏洞

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source , J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A security vulnerability exists in Red Hat JBoss Enterprise...

Undertow: Infinite loop in SslConduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2023-1475)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : byacc (EulerOS-SA-2023-1436)

According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...

Debian: Security Advisory (DLA-698-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-69-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-247-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : byacc (EulerOS-SA-2023-1461)

According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...

EulerOS 2.0 SP9 : libXpm (EulerOS-SA-2023-1475)

According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and c...

Infinite Loop vulnerability

Math/PrimeField.php in phpseclib has an infinite loop with composite primefields. This vulnerability was introduced in version 3.0.0, and has been patched in 3.0.19. The CVE for this issue originally identified the the vulnerable version as 2.x, however, the vulnerable functionality was not...