Lucene search
+L

12233 matches found

Github Security Blog
Github Security Blog
added 2021/06/08 6:48 p.m.58 views

Potential infinite loop in Pillow

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS2.8AI score0.02521EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2021/06/08 6:48 p.m.43 views

GHSA-7R7M-5H27-29HP Potential infinite loop in Pillow

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

8.7CVSS8.2AI score0.02521EPSS
SaveExploits0References11
Microsoft CVE
Microsoft CVE
added 2021/06/08 7:00 a.m.7 views

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

...

7.5CVSS7.8AI score0.07492EPSS
SaveExploits0
CNVD
CNVD
added 2021/06/08 12:00 a.m.110 views

Wireshark infinite loop vulnerability (CNVD-2022-11207)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...

7.5CVSS7.4AI score0.01914EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/07 1:15 p.m.2 views

DEBIAN-CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.5AI score0.01914EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/07 1:15 p.m.23 views

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

7.5CVSS0.01914EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2021/06/07 12:00 a.m.27 views

SUSE SLES15: avahi / avahi-autoipd / avahi-compat-howl-devel / etc (SUSE-SU-2021:1493-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1493-2 advisory. - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. Tenable has extracted the preceding description block...

5.5CVSS6.7AI score0.00443EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/07 12:00 a.m.10 views

Wireshark安全漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...

7.5CVSS7.5AI score0.01914EPSS
SaveExploits0References12
OSV
OSV
added 2021/06/03 3:53 p.m.9 views

SUSE-SU-2021:1494-2 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521...

5.5CVSS5.7AI score0.00443EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/03 3:52 p.m.9 views

SUSE-SU-2021:1845-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. - CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 - Update avahi-daemon-check-dns.sh from Debian. Our previous version relied o...

7.8CVSS5.7AI score0.00443EPSS
SaveExploits0References5
OSV
OSV
added 2021/06/02 4:15 p.m.32 views

CVE-2021-3468

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

5.5CVSS2.8AI score
SaveExploits0References3
NVD
NVD
added 2021/06/02 4:15 p.m.16 views

CVE-2021-3468

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

5.5CVSS0.00443EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/02 4:15 p.m.23 views

CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS0.02521EPSS
SaveExploits0References6
OSV
OSV
added 2021/06/02 4:15 p.m.28 views

CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS7.4AI score
SaveExploits0References6
OSV
OSV
added 2021/06/02 4:15 p.m.7 views

ALPINE-CVE-2021-3468

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

5.5CVSS6.3AI score0.00443EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 4:15 p.m.3 views

DEBIAN-CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS6.7AI score0.02521EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 4:15 p.m.3 views

DEBIAN-CVE-2021-3468

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

5.5CVSS6.9AI score0.00443EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 4:15 p.m.12 views

AZL-34548 CVE-2021-3468 affecting package avahi for versions less than 0.8-1

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

5.5CVSS6.6AI score0.00443EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 4:15 p.m.6 views

ALPINE-CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS7AI score0.02521EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 4:15 p.m.14 views

AZL-6324 CVE-2021-3468 affecting package avahi for versions less than 0.8-1

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

5.5CVSS6.6AI score0.00443EPSS
SaveExploits0References1
Rows per page
Query Builder