12355 matches found
Code injection
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusabl...
CVE-2018-12228
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusabl...
CVE-2018-12228
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusabl...
CVE-2018-12228
CVE-2018-12228 affects Asterisk Open Source 15.x before 15.4.1. When connected via TCP/TLS, if the client disconnects abruptly or sends a specially crafted message, Asterisk can enter an infinite loop while reading the data stream, resulting in a denial of service and rendering the system unusabl...
asterisk -- Infinite loop when reading iostreams
The Asterisk project reports: When connected to Asterisk via TCP/TLS if the client abruptly disconnects, or sends a specially crafted message then Asterisk gets caught in an infinite loop while trying to read the data stream. Thus rendering the system as unusable...
Liberapay: Buffer overflow
A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold or when a program attempts to put data in a memory area past a buffer. In this case, a buffer is a sequential section of memory allocated to contain anything from a character string to an arra...
CVE-2018-11657
ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...
CVE-2018-11657
ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...
CVE-2018-11657
The CVE-2018-11657 issue affects MiniUPnP’s ngiflib 0.4, specifically the DecodeGifImg and LoadGif routines, which can enter an infinite loop. The vulnerability is described across multiple sources (NVD, Red Hat, OSV, CVE listings) as ngiflib.c in MiniUPnP ngiflib 0.4 with an infinite loop in tho...
CVE-2018-11657
ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...
openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:1439-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : GraphicsMagick (openSUSE-2018-533)
This update for GraphicsMagick fixes the following issues : - CVE-2017-18271: An infinite loop in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service was fixed. boo1094204 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
CVE-2018-11386: Denial of service when using PDOSessionHandler
Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony http-foundation component are affected by this security issue. The issue has been fixed in Symfony 2.7.48, 2.8.41, 3.3.17, 3.4.11, and 4.0.11. 4.1.0 has also...
Debian: Security Advisory (DLA-1381-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-18273
In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted image file that is mishandled in a GetImageIndexInList call...
CVE-2017-18271
In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted MIFF image file...
CVE-2018-11365
sas/readstatsas7bcatread.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop...
CVE-2018-11365
sas/readstatsas7bcatread.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop...
Resource Management Errors
Overview Affected versions of this package are vulnerable to Resource Management Errors sas/readstatsas7bcatread.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop. Remediation There is no fixed version for readstat. References - Github.com...