Lucene search
+L

3055 matches found

Vulnrichment
Vulnrichment
added 2024/02/13 2:5 p.m.28 views

CVE-2023-6516 Specific recursive query patterns may lead to an out-of-memory condition

To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queue...

7.5CVSS6.7AI score0.01106EPSS
SaveExploits0References5
CVE
CVE
added 2024/02/13 2:5 p.m.550 views

CVE-2023-6516

CVE-2023-6516 affects ISC BIND (named) as a denial-of-service vector via an out-of-memory condition in the cache-cleanup path when recursive queries trigger maintenance. The issue can allow memory usage to exceed max-cache-size, potentially causing DoS on vulnerable BIND 9 installations. Affected...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/02/13 2:5 p.m.68 views

CVE-2023-6516 Specific recursive query patterns may lead to an out-of-memory condition

To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queue...

7.5CVSS7.7AI score0.01106EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2024/02/13 12:0 a.m.52 views

CVE-2023-6516

To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queue...

7.5CVSS7AI score0.01106EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/02/13 12:0 a.m.142 views

ISC BIND 9.16.0 < 9.16.48 / 9.16.8-S1 < 9.16.48-S1 Vulnerability (cve-2023-6516)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cve-2023-6516 advisory. - To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/11 4:15 a.m.33 views

CVE-2023-52427

In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resourcelimits.maxsamples. NOTE: the vendor's position is that the product is not designed to handle a maxsamples value that is too large for the amount of memory on the system...

7.5CVSS7.6AI score0.00612EPSS
SaveExploits1References1
NVD
NVD
added 2024/02/08 5:15 a.m.19 views

CVE-2024-24202

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file...

9.8CVSS9.6AI score0.01EPSS
SaveExploits1References1
Prion
Prion
added 2024/02/08 5:15 a.m.17 views

Design/Logic Flaw

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file...

7.5CVSS8.3AI score0.01EPSS
SaveExploits1References1Affected Software3
CNNVD
CNNVD
added 2024/02/08 12:0 a.m.7 views

Nature Easy Soft Network Technology ZenTao Code Issue Vulnerability

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management and other...

9.8CVSS7.7AI score0.01EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/02/08 12:0 a.m.17 views

CVE-2024-24202

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file...

7.8AI score0.01EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/02/08 12:0 a.m.7 views

PT-2024-20317 · Unknown · Zentao Community Edition +2

Name of the Vulnerable Software and Affected Versions: ZenTao Community Edition versions 18.10 ZenTao Biz versions 8.10 ZenTao Max versions 4.10 Description: An arbitrary file upload issue in the /upgrade/control.php endpoint allows attackers to execute arbitrary code by uploading a crafted .txt...

9.8CVSS7.8AI score0.01EPSS
SaveExploits1References5
CVE
CVE
added 2024/02/08 12:0 a.m.61 views

CVE-2024-24202

CVE-2024-24202 refers to an arbitrary file upload vulnerability in ZenTao components (Community Edition v18.10, Biz v8.10, Max v4.10) exposed at /upgrade/control.php. The root cause is a crafted .txt file upload that allows remote code execution. Affected products are explicitly ZenTao Community ...

9.8CVSS9.6AI score0.01EPSS
SaveExploits1References1Affected Software3
SUSE CVE
SUSE CVE
added 2024/02/07 3:45 a.m.5 views

SUSE CVE-2024-24857

A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service...

6.4CVSS6.8AI score0.00317EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/06 12:0 a.m.6 views

PT-2024-21507 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc2+ Description: The issue is related to the LoongArch architecture in the Linux kernel. When the hardware platform has more than 64 CPUs, the system will crash due to an array overflow when parsing the...

6.5CVSS6.8AI score0.00235EPSS
SaveExploits0References21
OSV
OSV
added 2024/02/05 8:15 a.m.5 views

UBUNTU-CVE-2024-24860

A race condition was found in the Linux kernel's bluetooth device driver in min,maxkeysizeset function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue...

5.3CVSS6.6AI score0.00805EPSS
SaveExploits0References23
CVE
CVE
added 2024/02/05 7:31 a.m.217 views

CVE-2024-24857

Summary (CVE-2024-24857) : A race condition in the Linux kernel’s net/bluetooth driver function conn_info_{min,max}age_set() may cause an integrity overflow, potentially causing Bluetooth connection abnormalities or DoS. Public sources place this as a kernel issue affecting the Bluetooth subsyste...

6.8CVSS7.3AI score0.00317EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2024/02/05 7:31 a.m.38 views

CVE-2024-24857 Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service...

4.6CVSS7.2AI score0.00317EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/05 7:28 a.m.32 views

CVE-2024-24859 Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.6CVSS6.8AI score0.00712EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.5 views

Linux kernel code issue vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a null pointer dereference in the min,maxkeysizeset method of the bluetooth device driver...

5.3CVSS6.2AI score0.00805EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.5 views

Linux kernel Competition Condition Problem Vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a Bluetooth sniffing exception in the sniffmin,maxintervalset method of net/bluetooth...

4.8CVSS6.5AI score0.00712EPSS
SaveExploits0References2
Rows per page
Query Builder