Lucene search
+L

12320 matches found

Prion
Prion
added 2019/12/12 9:15 a.m.26 views

Design/Logic Flaw

Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098...

7.8CVSS7.6AI score0.00658EPSS
SaveExploits0References1
CVE
CVE
added 2019/12/12 8:30 a.m.72 views

CVE-2019-10485

CVE-2019-10485 involves an infinite loop when decoding compressed data that can cause an overrun condition in various Snapdragon platforms (Auto, Compute, IoT, Mobile, Wearables, etc.). The issue affects a broad set of Qualcomm/Snapdragon components and is driven by a decoding loop condition, as ...

7.8CVSS7.5AI score0.00658EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/12 8:30 a.m.42 views

CVE-2019-10485

Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098...

7.6AI score0.00658EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/12 12:15 a.m.13 views

CVE-2019-5091

An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability...

7.5CVSS5.8AI score0.01942EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/12 12:00 a.m.7 views

LEAD Technologies LEADTOOLS Denial of Service Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. A denial of service vulnerability exists in the Dicom-packet parsing feature of the libltdic.so library in LEAD Technologies LEADTOOLS version 20.0.2019.3.15, which can be exploited by an attacker to cause ...

7.5CVSS6.8AI score0.01942EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/11 6:16 p.m.12 views

UBUNTU-CVE-2019-19582

An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...

6.5CVSS6.8AI score0.00378EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/12/11 4:50 p.m.64 views

CVE-2019-19582

An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...

6.5CVSS1.9AI score0.00378EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/12/11 12:00 a.m.3 views

PT-2019-6143 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to the function dname pkt copy in the Unbound DNS server, which can lead to an infinite loop when processing a compressed name. This could potentially allow a remote attacker t...

9.8CVSS7.7AI score0.03212EPSS
SaveExploits1References144
Talos
Talos
added 2019/12/10 12:00 a.m.38 views

LEADTOOLS libltdic.so LDicomAssociate::SetBinary denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability. Tested...

7.5CVSS7.7AI score0.01942EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/12/10 12:00 a.m.11 views

PT-2019-5716 · Python +10 · Python +10

Name of the Vulnerable Software and Affected Versions: Python versions through 3.8.3 Description: The issue is related to the proc pax function in Lib/tarfile.py, which lacks proper header validation, allowing an attacker to craft a TAR archive that can cause an infinite loop when opened by...

10CVSS6.4AI score0.75116EPSS
SaveExploits64References478
Tenable Nessus
Tenable Nessus
added 2019/12/10 12:00 a.m.38 views

EulerOS 2.0 SP2 : exempi (EulerOS-SA-2019-2373)

According to the versions of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote...

5.5CVSS6.1AI score0.01638EPSS
SaveExploits4References5
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/06 7:32 p.m.21 views

Security Bulletin: A vulnerability in Apache Commons Compress affects IBM InfoSphere Information Server connectivity componets

Summary A vulnerability in Apache Commons Compress was addressed by IBM InfoSphere Information Server Cloud related connectors. Vulnerability Details CVEID: CVE-2018-11771 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by the failure to return the correct EOF...

5.5CVSS1.1AI score0.05253EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/12/06 11:40 a.m.10 views

Denial Of Service (DoS)

asciidoctor is vulnerable to Denial of Service DoS attacks. When an absolete callout list follows a list item, an infinite loop will be triggered, resulting in a system hang...

2.7AI score
SaveExploits0
Veracode
Veracode
added 2019/12/06 6:09 a.m.15 views

Denial Of Service (DoS)

validators is vulnerable to denial of service DoS. The vulnerability exists as python would get stuck in an infinite loop when validators.domain parses a string with multiple...

7.5CVSS3.1AI score0.01468EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2019/12/05 1:15 a.m.15 views

CVE-2019-19588

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6...

7.5CVSS7.4AI score
SaveExploits0References1
NVD
NVD
added 2019/12/05 1:15 a.m.28 views

CVE-2019-19588

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6...

7.8CVSS7.4AI score0.01468EPSS
SaveExploits1References1
PyPA
PyPA
added 2019/12/05 1:15 a.m.12 views

PYSEC-2019-134

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6...

7.8CVSS6.8AI score0.01468EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2019/12/05 1:15 a.m.18 views

Code injection

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6...

7.8CVSS7.3AI score0.01468EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/12/05 1:15 a.m.10 views

PYSEC-2019-134

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6...

7.8CVSS5.9AI score0.01468EPSS
SaveExploits1References2
OSV
OSV
added 2019/12/05 1:15 a.m.8 views

PYSEC-2019-64

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder