Lucene search
+L

1173 matches found

Prion
Prion
added 2018/12/22 12:29 a.m.13 views

Design/Logic Flaw

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

1.9CVSS5.3AI score0.00398EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2018/12/22 12:29 a.m.5 views

UBUNTU-CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.5CVSS5.8AI score0.00398EPSS
SaveExploits1References3
CVE
CVE
added 2018/12/22 12:00 a.m.54 views

CVE-2018-20348

The CVE-2018-20348 entry documents a local-denial-of-service vulnerability in libpff: specifically, libpff_item_tree_create_node in libpff_item_tree.c (before experimental-20180714) can be triggered by a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. Exploitation would ...

5.5CVSS5.3AI score0.00398EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2018/12/22 12:00 a.m.50 views

CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.5CVSS5.3AI score0.00398EPSS
SaveExploits1
Cvelist
Cvelist
added 2018/12/22 12:00 a.m.25 views

CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.3AI score0.00398EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2018/12/19 12:00 a.m.15 views

PT-2023-15458 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is caused by infinite recursion in the Media GetSample function, located in isomedia/media.c:662, leading to a segment fault or stack overflow. Recommendations: For GPAC...

9.8CVSS7.4AI score0.04615EPSS
SaveExploits150References371
OSV
OSV
added 2018/12/12 5:29 p.m.10 views

DEBIAN-CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.2AI score0.06079EPSS
SaveExploits0References1
NVD
NVD
added 2018/12/12 5:29 p.m.26 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS7.4AI score0.06079EPSS
SaveExploits0References7
Prion
Prion
added 2018/12/12 5:29 p.m.40 views

Stack overflow

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

5CVSS7.3AI score0.06079EPSS
SaveExploits0References7Affected Software3
Debian CVE
Debian CVE
added 2018/12/12 5:00 p.m.80 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS5.9AI score0.06079EPSS
SaveExploits0
CVE
CVE
added 2018/12/12 5:00 p.m.290 views

CVE-2018-20103

CVE-2018-20103 affects HAProxy versions up to 1.8.14 (and related 1.8.x lineage); a crafted DNS response with a compressed pointer can cause infinite recursion or long pointer chains, leading to stack exhaustion and denial of service. The issue originates in dns.c when validating DNS responses. R...

7.5CVSS7.2AI score0.06079EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2018/12/12 12:00 a.m.7 views

UBUNTU-CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.7AI score0.06079EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2018/12/12 12:00 a.m.48 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.7AI score0.06079EPSS
SaveExploits0References2
OSV
OSV
added 2018/11/28 2:29 p.m.6 views

ALPINE-CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

6.5CVSS6.6AI score0.05192EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2018/11/28 2:00 p.m.41 views

CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

6.5CVSS6.6AI score0.05192EPSS
SaveExploits1
OSV
OSV
added 2018/11/27 12:00 a.m.9 views

UBUNTU-CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

6.5CVSS6.9AI score0.05192EPSS
SaveExploits1References5
OSV
OSV
added 2018/11/22 10:26 p.m.12 views

MGASA-2018-0465 Updated poppler packages fix security vulnerabilities

In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. CVE-2018-16646 An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becau...

6.5CVSS6.7AI score0.03638EPSS
SaveExploits4References2
RedhatCVE
RedhatCVE
added 2018/11/05 4:19 p.m.37 views

CVE-2018-18701

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions nextistypequal and cplusdemangletype in cp-demangle.c. Remote attackers could leverage this vulnerability t...

5.5CVSS5.1AI score0.0287EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2018/11/04 12:00 a.m.40 views

Debian: Security Advisory (DLA-1562-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.03638EPSS
SaveExploits4References3
Veracode
Veracode
added 2018/11/01 8:51 a.m.33 views

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. An attacker is able to trigger an infinite recursion in lwresd and named using a non absolute name for getrrsetbyname that exceeds the maximum allowable length, resulting in a denial of service condition...

5.9CVSS6AI score0.63346EPSS
SaveExploits0References18Affected Software1
Rows per page
Query Builder