CVE-2021-34332

CVE-2021-34332 affects Siemens JT2Go (all versions < 13.2) and Teamcenter Visualization (all versions

CVE-2021-34332

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPLoader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed input file could result in an infinite loop condition...

AZL-45081 CVE-2021-35515 affecting package apache-commons-compress 1.19-3

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

Design/Logic Flaw

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

Apache Commons Compress 安全漏洞

Apache Commons Compress is a library from the Apache USA Foundation for processing compressed files. A security vulnerability exists in Apache Commons Compress, which stems from the fact that constructing a list of decoders to decompress entries may result in an infinite loop when reading a...

ICSA-21-194-15_Siemens JT2Go and Teamcenter Visualization

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Double Free, Infinite Loop, Out-of-bounds Write, Use After Free, Heap-based Buffer Overflow, Buffer Over-read, Out-of-bounds Read, Improper Restriction...

The vulnerability of QEMU’s emulation software for various platform hardware devices lies in the execution of a loop with an unreachable exit condition, allowing a malicious actor to cause a service failure.

The vulnerability of QEMU’s software for emulating hardware on various platforms is related to the infinite operation of a loop. Exploiting this vulnerability allows an attacker to cause a service failure...

OPENSUSE-SU-2021:1845-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. - CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 - Update avahi-daemon-check-dns.sh from Debian. Our previous version relied o...

Ubuntu 18.04 LTS / 20.04 LTS : Avahi vulnerabilities (USN-5008-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5008-1 advisory. Thomas Kremer discovered that Avahi incorrectly handled termination signals on the Unix socket. A local attacker could possibly use this issu...

Ubuntu 16.04 ESM : Avahi vulnerability (USN-5008-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5008-2 advisory. USN-5008-1 fixed a vulnerability in avahi. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2021-2172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec, which is related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created WAV audio file...

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick, related to the infinite execution of a loop, allows an attacker to cause a service failure.

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially created file...

MediaWiki Denial of Service Vulnerability (CNVD-2021-48975)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. MediaWiki 1.36 suffers from a security vulnerability that stems from an issue discovered in the CentralAut...