Denial Of Service (DoS)

Linux is vulnerable to Denial Of Service DoS. The vulnerability exists in the ismergeableanonvma function of rmap.c due to a use-after-free related to leaf anonvma double reuse which allows an attacker to cause an application crash by providing malicious input...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists Databuf function of rafimage.cpp due to a null pointer dereference which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libcmark-gfm.so is vulnerable to denial of service. The vulnerability exists in multiple functions of inlines.c due to unbounded resource exhaustion which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exim4 is vulnerable to denial of service. The vulnerability exists in src/expand.c due to use after free in Regex Handler which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service.The vulnerability exists in QuickTimeVideo::multipleEntriesDecoder function of quicktimevideo.cpp due to an infinite loop in the Quicktime Video Handler which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application by providing a maliciously crafted input through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application by providing a maliciously crafted input through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service.The vulnerability exists due to network access via multiple protocols to compromise MySQL Server which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to Denial of Service. The vulnerability exists because of missing validate network access via multiple protocols which allows an attacker to cause an application crash via malicious input...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to Denial of Service. The vulnerability exists because of lack of security encryption support to network access via multiple protocols which allows an attacker to cause an application crash via malicious input...

Msgpack 安全漏洞

Msgpack is open source an efficient binary serialization format . It allows you to exchange data between multiple languages such as JSON. But it's faster and smaller. Small integers are encoded as one byte, and typical short strings require only one extra byte in addition to the string itself...

No commitment to data passed as input to the init contract during the execution of the diamond cut proposal

Lines of code Vulnerability details Description There is a function executeDiamondCutProposal in the DiamondCutFacet contract. It checks that proposal data passed as input to this call is equal to the data that is declared when the creation of this proposal using the following logic: require...

Denial Of Service (DoS)

keylime is vulnerable to denial of service. The vulnerability is due to a lack of proper exception handling in the request function of tornadorequests.py which allows an attacker to crash the application via malicious input...

[PNM-002] finalize with malicious input may lock bidder funds in the contract

Lines of code Vulnerability details Description The finalize function of the contract SizeSealed is used to finalize an auction, allowing the auctioner or seller to be paid quote tokens and also eventually allowing successful bidders to withdraw base tokens. Once the finalize function is called,...

Denial Of Service (DoS)

mruby is vulnerable denial of service. The vulnerability exists in ivfree function of variable.c due to a null pointer dereference which allows an attacker to crash the application via malicious input...

SUSE-SU-2022:3875-1 Security update for xmlbeans

This update for xmlbeans fixes the following issues: - CVE-2021-23926: Fixed XML parsers not protecting from malicious XML input bsc1180915...

Denial Of Service (DoS)

libtasn1.so is vulnerable to Denial Of Service DoS. The vulnerability exists in struct tagandclassst function of init.h due to an ETYPEOK off-by-one array size check which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

muhammara is vulnerable to denial of service. The vulnerability exists in multiple functions of ObjectByteWriterWithPosition.cpp when PDFStreamForResponse is used with invalid data which allows an attacker to crash the application via malicious input...

RUSTSEC-2022-0079 ELF header parsing library doesn't check for valid offset

The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflow. The vulnerability exists when datasize is less than headersize in the WebPImage::getHeaderOffset function of webpimage.cpp, allowing an attacker to cause an application crash through the integer overflow by providing a malicious input...