12051 matches found
CVE-2021-44718
CVE-2021-44718 affects wolfSSL up to version 5.0.0, where the client component can be overwhelmed by crafted MITM traffic because the client accepts TLS messages normally destined for servers, causing denial of service and an infinite loop. The issue is a client-side handling flaw in TLS message ...
PT-2022-12209 · Wolfssl +1 · Wolfssl +1
Name of the Vulnerable Software and Affected Versions: wolfSSL versions through 5.0.0 Description: The issue allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the...
CVE-2022-38128
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-38128
Removed by vendor...
PT-2022-24221 · Gnu · Binutils
Name of the Vulnerable Software and Affected Versions: binutils affected versions not specified Description: The issue is related to an infinite loop that may be triggered in the display debug abbrev function in binutils/dwarf.c when opening a crafted ELF file. This could lead to a denial of...
Security Bulletin: Vulnerability in Fabric OS firmware used by IBM b-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in the Fabric OS FOS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID:CVE-2021-4044 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by invalid handling of X509verifycert intern...
Security Bulletin: Vulnerability in Fabric OS firmware used by IBM b-type SAN directors and switches.
Summary Public disclosed vulnerability from OpenSSL in the Fabric OS FOS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID:CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when parsing certificates. By usi...
Mitsubishi Electric Multiple Factory Automation Products (Update B)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...
no one can create a proposal by calling propose() or voting on any proposal
Lines of code Vulnerability details Impact -The users could not create a proposal by invoking propose -The users could not be voting on any proposal by invoking castVoteBySig, castVoteWithReason, castRefundableVoteInternal,castRefundableVoteWithReason, castRefundableVote and castVote -The propose...
Ubuntu: Security Advisory (USN-302-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
DEBIAN-CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
Code injection
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
UBUNTU-CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
The CVE-2022-37768 entry concerns the libjpeg project, where commit 281daa9 is reported to introduce an infinite loop in Frame::ParseTrailer. The issue affects libjpeg and has a high impact on availability (CVSS: 7.5, Network attack vector, no privileges required, no user interaction). Multiple c...
