CVE-2021-44924

GPAC 1.1.0 contains an infinite loop vulnerability in gf_log that can cause Denial of Service (CVE-2021-44924). Affected component is the gf_log function within GPAC; impact is DoS, with LOCAL/remote possibilities depending on execution context as described in sources. Connected documents confirm...

CVE-2021-45297

GPAC 1.0.1 contains an infinite loop in gf_get_bit_size (CVE-2021-45297). This GPAC multimedia framework issue can cause a denial-of-service condition (partial availability impact per CVSS info). Debian and Gentoo advisories note fixes up to 1.0.1+dfsg1-4+deb11u2; upgrade GPAC to the patched vers...

Security update for tinyxml (low)

openSUSE Security Update: Security update for tinyxml Announcement ID: openSUSE-SU-2021:1474-1 Rating: low References: 1191576 Cross-References: CVE-2021-42260 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tinyxml fixes...

RLSA-2021:4316 Low: zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: infinite loop via the return value of zzipfileread as used in unzzipcatfile CVE-2020-18442 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...

zziplib security update

An update is available for zziplib. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The zziplib is a lightweight library to easily extract data from zip files...

The vulnerability of the software for ensuring high availability and load balancing for TCP and HTTP applications managed by Haproxy arises from the execution of a loop with an unreachable exit condition. This allows a attacker to cause a service failure.

The vulnerability of the software used for ensuring high availability and load balancing for TCP and HTTP applications managed by Haproxy is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...

OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacke...

EulerOS 2.0 SP3 : perl-Convert-ASN1 (EulerOS-SA-2021-2603)

According to the versions of the perl-Convert-ASN1 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected...

Oracle Linux 8 : libtirpc (ELSA-2021-9449)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9449 advisory. 1.1.4-4.0.1 - Backport fix for CVE-2018-14621 in libtirpc Orabug: 33017925 Tenable has extracted the preceding description block directly from the Oracle Linux...

Siemens JT2Go and Teamcenter Visualization Infinite Loop Vulnerability

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. An infinite loop vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

MGASA-2021-0279 Updated wireshark packages fix a security vulnerability

The DVB-S2-BB dissector could go into an infinite loop...

CVE-2021-21279

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation NS messages. This type of attack can effectively...

SUSE: Security Advisory (SUSE-SU-2021:1494-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark infinite loop vulnerability (CNVD-2022-11207)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...

Apple macOS SMB server lock request infinite loop

Summary A resource exhaustion vulnerability exists in the SMB Server on Apple macOS 11.2. A specially crafted SMB packet can trigger an infinite loop which leads to maximum CPU utilization and denial of service. This vulnerability can be triggered by sending a malicious packet to the vulnerable...

Oracle Linux 7 : olcne (ELSA-2021-9268)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9268 advisory. - Fix for CVE-2021-27918 - Address CVE-2021-27918 etcd - Address CVE-2021-27918 flannel - Address CVE-2021-27918 yq - Address CVE-2021-27918 conmon - Address...

CVE-2021-29591

TensorFlow/TfLite vulnerability CVE-2021-29591 stems from loops in TFlite subgraphs (example: While) allowing potential infinite recursion and stack exhaustion during evaluation. Affected: TensorFlow/TfLite; root cause: unchecked looping between body and loop subgraphs. Impact described as stack ...

SUSE-SU-2021:1500-1 Security update for python-Pygments

This update for python-Pygments fixes the following issues: - CVE-2021-20270: Fixed an infinite loop in SML lexer which may lead to DoS bsc1183169...

Unbound Infinite Loop Vulnerability

Unbound is a DNS resolver that supports validation, recursion, and caching features. An infinite loop vulnerability exists in dnamepktcopy in Unbound versions prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an infinite loop...