Code injection

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

UBUNTU-CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

EulerOS Virtualization 2.5.1 : glibc (EulerOS-SA-2018-1272)

According to the version of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch...

CVE-2018-17042

An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop...

Design/Logic Flaw

An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop...

CVE-2018-17042

An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop...

CVE-2018-17042

An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop...

CVE-2018-17042

CVE-2018-17042 affects dbf2txt (up to version/through 2012-07-19). The issue is an infinite loop in the program, leading to denial of service. Public details in the connected documents consistently describe the vulnerability as an infinite loop without exposing exploit vectors or concrete remedia...

dbf2txt infinite loop vulnerability

dbf2txt is a tool for reading DB files and converting them to TXT files. A security vulnerability exists in dbf2txt version 2012-07-19 and earlier. An attacker can exploit this vulnerability to cause a denial of service infinite loop...

tomcat: A bug in the UTF-8 decoder can lead to DoS

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86...

tomcat: A bug in the UTF-8 decoder can lead to DoS

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86...

tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service

An infinite loop vulnerability was discovered in Apache Tika prior to version 1.18. A remote attacker could exploit this to cause a denial of service via crafted file...

pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via crafted PDF

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

Updated libxkbcommon packages fix security vulnerabilities

Updated libxkbcommon packages fix security vulnerabilities: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation CVE-2018-15853...

Debian DLA-1497-1 : qemu security update (Spectre)

Several vulnerabilities were found in qemu, a fast processor emulator : CVE-2015-8666 Heap-based buffer overflow in QEMU when built with the Q35-chipset-based PC system emulator CVE-2016-2198 NULL pointer dereference in ehcicapswrite in the USB EHCI support that may result in denial of service...

DNP3 Implementation Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-13-291-01A DNP3 Implementation Vulnerability that was published November 21, 2013, on the NCCIC/ICS-CERT web site. Adam Crain of Automatak and Chris Sistrunk, Sr. Consultant for Mandiant, reported an improper input...

RHEL 7 : collectd (RHSA-2018:2615)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2615 advisory. collectd is a host-based system statistics collection daemon that gathers metrics from various sources periodically, such as the operating...