Lucene search
+L

16624 matches found

osv_cve
osv_cve
•added 2025/01/31 11:25 a.m.•33 views

CVE-2025-21665 filemap: avoid truncating 64-bit offset to 32 bits

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

5.5CVSS6.1AI score0.00215EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•6 views

CVE-2025-21667: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomapwritedelallocscan was inadvertently using a 32-bit position due to folionextindex returning an unsigned long. This could lead to an infinite loop when...

5.5CVSS6.2AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•13 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an integer overflow vulnerability that stems from the iomapwritedelallocscan function incorrectly truncating 64-bit offsets to 32-bit in the 32-bi...

5.5CVSS6.5AI score0.00217EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•3 views

CVE-2025-21665: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

5.5CVSS6.2AI score0.00215EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•12 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an integer overflow vulnerability, which stems from the folioseekholedata function incorrectly truncating 64-bit offsets to 32-bit in the 32-bit kerne...

5.5CVSS6.5AI score0.00215EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•7 views

CVE-2025-21681: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: dooutput - ovsvportsend - devqueuexmit - devqueuexmit - netdevcorepicktx -...

5.5CVSS6AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•16 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ovsvportsend function not properly checking that the device is in a running state when the device is...

5.5CVSS6.1AI score0.00216EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/30 2:27 p.m.•20 views

Security Bulletin: Vulnerability in Apache commons-compress affects watsonx.data

Summary Apache Commons Compress is vulnerable to a denial of service attack and this could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop flaw. By persuading a victim to open a...

8.1CVSS6.5AI score0.00441EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2025/01/29 12:00 a.m.•19 views

Ubuntu: Security Advisory (USN-7239-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.03799EPSS
SaveExploits7References2
osv_usn
osv_usn
•added 2025/01/28 11:36 p.m.•24 views

USN-7239-1 libmicrodns vulnerabilities

It was discovered that libmicrodns could recursively follow the same compression pointer, leading to an infinite loop. An attacker could possibly use this issue to cause a denial of service. CVE-2020-6071 It was discovered that libmicrodns did not check the return value of the rrdecode function,...

9.8CVSS7.8AI score0.03799EPSS
SaveExploits7References8
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/28 10:08 p.m.•30 views

Security Bulletin: IBM Maximo Application Suite uses bcprov-jdk18on-1.72.jar and protobuf-java-3.22.0.jar which is vulnerable to CVE-2023-33201, CVE-2023-33202, CVE-2024, CVE-2024-7254

Summary Security Bulletin: Security Bulletin: IBM Maximo Application Suite uses bcprov-jdk18on-1.72.jar and protobuf-java-3.22.0.jar which is vulnerable to CVE-2023-33201, CVE-2023-33202, CVE-2024, CVE-2024-7254. This bulletin contains information regarding the vulnerability and its fixture...

8.7CVSS6.9AI score0.02772EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/28 10:08 p.m.•26 views

Security Bulletin: IBM Storage Protect Server is susceptible to multiple vulnerabilities due to Golang Go ( CVE-2024-24787, CVE-2024-24788 ).

Summary Golang Go is used by the IBM Storage Protect Server OSSM component. Golang Go is vulnerable to loss of integrity and availability of host system. This bulletin identifies the steps to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-24787 DESCRIPTION: Golang Go could allo...

6.4CVSS8.6AI score0.00993EPSS
SaveExploits1Affected Software1
osv_cve
osv_cve
•added 2025/01/28 8:15 p.m.•20 views

CVE-2024-40675

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.00317EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/01/28 8:15 p.m.•20 views

UBUNTU-CVE-2024-40675

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.00317EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/28 7:13 p.m.•15 views

CVE-2024-40675

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00317EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/28 7:13 p.m.•331 views

CVE-2024-40675

Google Android suffers from an input validation error within the parseUriInternal function of Intent.java . Due to incorrect validation, an attacker can trigger a possible infinite loop , leading to a local denial of service (DoS). This vulnerability requires no additional execution privileges an...

7.5CVSS5.9AI score0.00317EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2025/01/28 7:13 p.m.•9 views

CVE-2024-40675

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

8.7CVSS5.9AI score0.00317EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/28 8:45 a.m.•64 views

CVE-2025-0290 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive...

4.3CVSS0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/28 8:45 a.m.•9 views

CVE-2025-0290 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive...

4.3CVSS5.3AI score0.00371EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•6 views

CVE-2024-40675: Loop with Unreachable Exit Condition

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.00317EPSS
SaveExploits0References1
Rows per page
Query Builder