CVE-2020-13602

CVE-2020-13602 describes a Remote Denial of Service in Zephyr’s LwM2M do_write_op_tlv. Affected product: Zephyr RTOS, with vulnerable branches at least v1.14.2 and v2.2.0. Root cause: improper input validation (CWE-20) leading to an Infinite Loop (CWE-835). Impact: Denial of service due to proces...

Denial Of Service (DoS)

yaml-language-server is vulnerable to denial of service. The vulnerability exists due to an infinite loop in the recursivelyBuildAst function...

CVE-2021-33194

A flaw was found in golang. An attacker can craft an input to ParseFragment within parse.go that would cause it to enter an infinite loop and never return. The greatest threat to the system is of availability...

GHSA-CWV3-863G-39VX Stack overflow due to looping TFLite subgraph

Impact TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be replaced by stack overflow due to too many recursive calls. For...

SUSE-SU-2021:14729-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. - CVE-2021-3517: Fixed a heap based buffer...

golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash

A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to supply specific...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:1762)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1762 advisory. - libvirt: double free in qemuAgentGetInterfaces in qemuagent.c CVE-2020-25637 - QEMU: heap buffer overflow in iscsiaioioctlcb in block/iscsi.c may lea...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2021:1762)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1762 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contai...

golang.org/x/text Infinite loop

Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...

GHSA-RMH2-65XW-9M6Q Infinite Loop in jsonparser

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...

Infinite Loop in jsonparser

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...

unbound: infinite loop via a compressed name in dname_pkt_copy

A flaw was found in unbound. An infinite loop in dnamepktcopy function could be triggered by a remote attacker. The highest threat from this vulnerability is to service availability...

QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c

An infinite loop flaw was found in the e1000e NIC emulation code of QEMU. This issue occurs in the e1000ewritepackettoguest routine while processing bogus RX descriptor data transmitted by the guest. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a...

QEMU: e1000e: infinite loop scenario in case of null packet descriptor

An infinite loop flaw was found in the e1000e device emulator in QEMU. This issue could occur while receiving packets via the e1000ewritepackettoguest routine, if the receiveRX descriptor has a NULL buffer address. This flaw allows a privileged guest user to cause a denial of service. The highest...

glibc: iconv program can hang when invoked with the -c option

The iconv program in the GNU C Library aka glibc or libc6 2.31 and earlier, when invoked with multiple suffixes in the destination encoding TRANSLATE or IGNORE along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service...

glibc security, bug fix, and enhancement update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

RLSA-2021:1585 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

openSUSE Security Update : avahi (openSUSE-2021-694)

This update for avahi fixes the following issues : - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. This update was imported from the SUSE:SLE-15-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

EulerOS 2.0 SP8 : python-pygments (EulerOS-SA-2021-1887)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...

Loop with Unreachable Exit Condition ('Infinite Loop')

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...