16707 matches found
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Oracle Linux 9 : buildah (ELSA-2024-2550)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2550 advisory. 1.33.7-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.7-1 - update to the latest content of...
PT-2024-24940 · Vitess · Vitess
Name of the Vulnerable Software and Affected Versions: Vitess versions prior to 17.0.7 Vitess versions prior to 18.0.5 Vitess versions prior to 19.0.4 Description: The issue arises when executing a specific query, causing the vtgate to enter an endless loop and consume increasing amounts of memor...
CVE-2024-24788: Loop with Unreachable Exit Condition
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Google Golang security vulnerabilities
Google Golang is a static strongly typed, compiled language from Google.Go's syntax is close to that of C, but differs with respect to variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages that...
GO-2024-2824 Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Infinite loop
Overview std/net is a Go standard library package std/net Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report:A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. Remediation Upgrade std/net to versi...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPFlowStats function in parser.py, which allows an attackers to trigger an infinite loop by setting the length of the inst parameter to 0...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPMultipartReply function in parser.py, allowing an attacker to trigger an infinite loop by setting the length parameter to 0...
Denial Of Service (DoS)
ryu is vulnerable to Denial of service. The vulnerability is due to inadequate input validation when the length=0 within the OFPHello function in parser.py, which results in an infinite loop...
Denial Of Service (DoS)
ryu is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of OFPGroupDescStats in ofprotov13parser.py, where setting the length of OFPBucket to 0 causes the offset and length to remain unchanged, leading to an infinite loop during parsing...
SUSE CVE-2024-34483
OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...
SUSE CVE-2024-34484
OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via action.len=0...
SUSE CVE-2024-34487
OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...
SUSE CVE-2024-34488
OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via b.length=0...
PT-2024-6377
Name of the Vulnerable Software and Affected Versions Traefik affected versions not specified Description A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. The issue is related to the net component of the Go programming language, which...
Oracle Linux 9 : podman (ELSA-2024-2548)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2548 advisory. 4.9.4-3.0.1 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put should ignore...
Oracle Linux 9 : edk2 (ELSA-2024-2264)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2264 advisory. - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853 -...