Lucene search
+L

1175 matches found

RedHat Linux
RedHat Linux
added 2023/05/10 11:25 a.m.22 views

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

7.5CVSS7.1AI score0.01466EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/05/10 11:25 a.m.12 views

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

7.5CVSS7.1AI score0.01466EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/05 9:12 p.m.32 views

Security Bulletin: Vulnerability in Jettison affects IBM Process Mining . CVE-2023-1436

Summary There is a vulnerability in Jettison that could allow a remote attacker to execute a denial of service on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2023-1436...

7.5CVSS6.9AI score0.01009EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2023/05/03 2:05 p.m.7 views

jettison: Uncontrolled Recursion in JSONArray

A flaw was found in Jettison. Infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This issue leads to a StackOverflowError exception being thrown...

7.5CVSS7AI score0.01009EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/05/03 2:05 p.m.13 views

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

7.5CVSS7.1AI score0.01466EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/28 4:02 p.m.19 views

USN-6049-1 netty vulnerabilities

It was discovered that Netty's Zlib decoders did not limit memory allocations. A remote attacker could possibly use this issue to cause Netty to exhaust memory via malicious input, leading to a denial of service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 20.04 ESM. CVE-2020-11612 It wa...

7.5CVSS6.8AI score0.18891EPSS
SaveExploits3References10
OSV
OSV
added 2023/04/21 12:15 p.m.4 views

SUSE-SU-2023:1948-1 Security update for jettison

This update for jettison fixes the following issues: Upgrade to version 1.5.4: - CVE-2023-1436: Fixed infinite recursion triggered when constructing a JSONArray from a Collection bsc1209605...

7.5CVSS7.5AI score0.01009EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2023/03/29 11:45 a.m.10 views

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

7.5CVSS7.1AI score0.01466EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/03/29 11:43 a.m.10 views

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

7.5CVSS7.1AI score0.01466EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/03/23 4:10 a.m.6 views

SUSE CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

6.2CVSS7.6AI score0.01009EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/22 6:30 a.m.11 views

GHSA-Q6G2-G7F3-RR83 Jettison vulnerable to infinite recursion

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

7.5CVSS6.7AI score0.01009EPSS
SaveExploits1References6
OSV
OSV
added 2023/03/22 6:15 a.m.3 views

DEBIAN-CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

7.5CVSS6.2AI score0.01009EPSS
SaveExploits1References1
Prion
Prion
added 2023/03/22 6:15 a.m.40 views

Design/Logic Flaw

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

5CVSS7.3AI score0.01009EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/03/22 6:15 a.m.35 views

CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

7.5CVSS6.7AI score0.01009EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/22 6:15 a.m.10 views

UBUNTU-CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

7.5CVSS6.6AI score0.01009EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/22 12:00 a.m.8 views

Jettison 安全漏洞

Jettison is jettison-json open source Jettison is a Java library . Jettison is a Java library that is used to convert XML to JSON with the help of StAX. Jettison JSONArray has a security vulnerability , the vulnerability stems from the infinite recursion in Jettison leads to a denial of service...

7.5CVSS6.2AI score0.01009EPSS
SaveExploits1References13
Vulnrichment
Vulnrichment
added 2023/03/16 8:59 p.m.4 views

CVE-2023-1436 Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

5.9CVSS7.4AI score0.01009EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2023/03/16 8:59 p.m.50 views

CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

7.5CVSS7.5AI score0.01009EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2023/03/10 8:00 a.m.13 views

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

...

5.5CVSS7AI score0.00411EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:15 a.m.5 views

SUSE CVE-2006-2274

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service infinite recursion and crash via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the...

5CVSS6.9AI score0.03815EPSS
SaveExploits0References4
Rows per page
Query Builder