12053 matches found
UBUNTU-CVE-2021-37819
PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java...
CVE-2021-37819
PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java...
Code injection
PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java...
CVE-2021-37819
PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java...
CVE-2021-37819
CVE-2021-37819 affects PDF Labs pdftk-java 3.2.3 due to an infinite loop in PdfReader.java. The issue is a local, input-driven loop that can impact availability (per CVSS: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The description does not specify a vendor patch or workaround; no remediation det...
pdftk-java 安全漏洞
pdftk-java is a toolkit for working with Portable Document Format PDF documents from the PDF Labs team. A security vulnerability exists in version 3.2.3 of pdftk-java, which originates from an infinite loop contained in the /text/pdf/PdfReader.java component...
PT-2022-10671 · Pdf +1 · Pdftk-Java +1
Name of the Vulnerable Software and Affected Versions: PDF Labs pdftk-java version 3.2.3 Description: The issue is related to an infinite loop in the PdfReader.java component. This component is part of the /text/pdf directory. Recommendations: For PDF Labs pdftk-java version 3.2.3, consider...
Wireshark 3.4.x < 3.4.16 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.16 advisory. - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15...
Wireshark 3.4.x < 3.4.16, 3.6.x < 3.6.8 DoS
The version of Wireshark installed on the remote Windows host is prior to 3.4.0 to 3.4.15 and 3.6.0 to 3.6.7. It is, therefore, affected by denial of service vulnerability as referenced in the wireshark-3.6.8 advisory. The F5 Ethernet Trailer dissector could go into an infinite loop. It may be...
Wireshark 3.6.x < 3.6.8 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.8. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.8 advisory. - The F5 Ethernet Trailer dissector could go into an infinite loop. It may be possible to make Wireshark consume...
PT-2022-7124
Name of the Vulnerable Software and Affected Versions PyPDF2 versions prior to 2.10.6 Description The issue is related to a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker can craft a PDF that leads to an infinite loop, blockin...
Wireshark 3.4.x < 3.4.16 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 3.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.16 advisory. - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows deni...
Denial of service
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...
CVE-2022-28884 Denial-of-Service (DoS) Vulnerability
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...
Amazon Linux 2022 : openssl, openssl1.1, openssl1.1-devel (ALAS2022-2022-041)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-041 advisory. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that conta...
PT-2022-19289 · F Secure +1 · F-Secure +1
Name of the Vulnerable Software and Affected Versions: F-Secure and WithSecure products affected versions not specified Description: A Denial-of-Service issue was found where the aerdl.dll may enter an infinite loop when unpacking PE files, potentially causing the scanning engine to crash...
Amazon Linux 2022 : wireshark-cli, wireshark-devel (ALAS2022-2022-079)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-079 advisory. A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted...
Debian dla-3099 : qemu - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3099 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3099-1 [email protected]...
DEBIAN-CVE-2021-44718
wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers...
CVE-2021-44718
wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers...