12363 matches found
wireshark: f5ethtrailer Infinite loop in legacy style dissector
A vulnerability was found in Wireshark. This issue occurs due to an Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark, leading to a denial of service via packet injection or crafted capture file...
Moderate: php:8.1 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php 8.1.14. Security Fixes: XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could b...
ALSA-2023:2417 Moderate: php:8.1 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php 8.1.14. Security Fixes: XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could b...
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2023-1762)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : byacc (EulerOS-SA-2023-1756)
According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...
EulerOS 2.0 SP11 : byacc (EulerOS-SA-2023-1778)
According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...
EulerOS 2.0 SP11 : libXpm (EulerOS-SA-2023-1762)
According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and c...
EulerOS Virtualization 3.0.2.0 : libtirpc (EulerOS-SA-2023-1703)
According to the versions of the libtirpc package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TC...
Hitachi Energy's RTU500 Series Product (UPDATE B)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Hitachi Energy Equipment : RTU500 Series Vulnerabilities : Type Confusion, Observable Timing Discrepancy, Out-of-bounds Read, Infinite Loop, Classic Buffer Overflow 2. RISK EVALUATION...
Undertow: Infinite loop in SslConduit during close
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...
Important: Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.3 security update
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
DEBIAN-CVE-2023-30300
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...
CVE-2023-30300
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...
CVE-2023-30300
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...
Design/Logic Flaw
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...
UBUNTU-CVE-2023-30300
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...
PT-2023-22626 · Unknown +1 · Webassembly +1
Name of the Vulnerable Software and Affected Versions: WebAssembly version 1.0 Description: An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. Recommendations: For WebAssembly version 1.0, consider disabling the hang.wasm component as a temporary workaround until a...
CVE-2023-30300
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop...
CVE-2023-30300
CVE-2023-30300 describes an infinite loop in the hang.wasm component of WebAssembly 1.0. The issue is documented across multiple sources (NVD, OSV, Debian/Ubuntu OSSVs, Fedora/Nessus plugins) with a common root cause: hang.wasm causes unbounded execution, leading to availability impact. CVSS 3.1 ...
