16883 matches found
X.Org libX11 security vulnerability
X.Org libX11 is an X11 X Window System client library from the X.org Foundation. A security vulnerability exists in libX11, which originates from an infinite loop in the PutSubImage function. An attacker can exploit this vulnerability to consume system resources and cause a denial of service DoS...
asyncua vulnerable to denial of service via infinite loop
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
GHSA-GFVQ-MXW3-MFQ3 asyncua vulnerable to denial of service via infinite loop
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
UBUNTU-CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
PYSEC-2023-190
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
PYSEC-2023-190
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
CVE-2023-43786
A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local user to consume all available system resources and cause a denial of service condition...
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
CVE-2023-26151: Uncontrolled Resource Consumption
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...
asyncua Security Vulnerabilities
asyncua is a library in the Free OPC-UA Library open source. A security vulnerability exists in asyncua versions prior to 0.9.96 that stems from susceptibility to denial-of-service DoS attacks, where an attacker can send packets in the wrong format, causing the server to enter an infinite loop an...
PT-2023-6112
Name of the Vulnerable Software and Affected Versions libX11 affected versions not specified Description The issue is related to an infinite loop within the PutSubImage function of the libX11 library, which provides the client API for the X Window System. This flaw allows a local user to consume...
UBUNTU-CVE-2023-43786
A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local user to consume all available system resources and cause a denial of service condition...
PT-2023-20530 · Asyncua · Asyncua
Name of the Vulnerable Software and Affected Versions: asyncua versions prior to 0.9.96 Description: The issue allows an attacker to send a malformed packet, causing the server to enter an infinite loop and consume excessive memory, resulting in a Denial of Service DoS. Recommendations: For...
MGASA-2023-0275 Updated wireshark packages fix security vulnerabilities
The updated wireshark packages fix security vulnerabilities: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. CVE-2023-2906 BT SDP dissector...
ABB RTU500 Series Infinite Loop in embedded OpenSSL (CVE-2022-0778)
A vulnerability exists in the OpenSSL version 1.0.2 that affects the RTU500 Series product versions listed below. RTU500 series CMU Firmware versions 12.0.1 â 12.0.14 12.2.1 â 12.2.11 12.4.1 â 12.4.11 12.6.1 â 12.6.8 12.7.1 â 12.7.5 13.2.1 â 13.2.5 13.3.1 â 13.3.3 13.4.1 The BNmodsq...
Amazon Linux 2 : python38 (ALASPYTHON3.8-2023-008)
The version of python38 installed on the remote host is prior to 3.8.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PYTHON3.8-2023-008 advisory. A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite...
Amazon Linux 2 : golang (ALASGOLANG1.19-2023-001)
The version of golang installed on the remote host is prior to 1.19.10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GOLANG1.19-2023-001 advisory. The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some...
x/net/html Vulnerable to DoS During HTML Parsing
The html package aka x/net/html through 2018-09-25 in Go mishandles , leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification...