Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to an unbounded memory consumption when large pages are in use to map guest pages in the 2nd-stage page tables causing an application crash...

Denial of service

In Linaro Automated Validation Architecture LAVA before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the server and a Denial of Service...

Debian DSA-5272-1 : xen - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5272 advisory. Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks. For the...

artemis-commons: Apache ActiveMQ Artemis DoS

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability DoS through uncontrolled resource consumption of memory...

artemis-commons: Apache ActiveMQ Artemis DoS

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability DoS through uncontrolled resource consumption of memory...

artemis-commons: Apache ActiveMQ Artemis DoS

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability DoS through uncontrolled resource consumption of memory...

CVE-2022-40747: Improper Restriction of XML External Entity Reference

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."...

CVE-2022-42795

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution...

Denial Of Service (DoS)

py3-rencode is vulnerable to denial of service. The vulnerability exists due to an infinite loop in typecode decoding enabling a remote attacker to cause a memory consumption resulting in an application crash...

CVE-2022-42795

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-42795

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-42795

CVE-2022-42795 describes a memory consumption vulnerability tied to processing a malicious image that could lead to arbitrary code execution. The issue affects Apple platforms (tvOS 16, iOS 16, macOS Ventura 13, watchOS 9) and is mitigated by memory handling improvements in the respective updates...

Use After Free

libexpat.so is vulnerable to use-after-free. The vulnerability exists due to a lack of entity value validations in the XMLParserFree parameter of the parserCreate function in xmlparse.c. An attacker could exploit it to lead to memory consumption resulting in an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to a excessive memory consumption in the gfisommetarestoreitemsref function of meta.c which causes a segmentation fault, allowing an attacker to crash the application...

SUSE: Security Advisory (SUSE-SU-2022:3669-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3669-1 Security update for go1.19

This update for go1.19 fixes the following issues: Updated to version 1.19.2 bsc1200441: - CVE-2022-41715: Fixed memory exhaustion in regexp/syntax bsc1204023. - CVE-2022-2879: Fixed unbounded memory consumption when reading headers in archive/tar bsc1204024. - CVE-2022-2880: Fixed ReverseProxy...

SUSE-SU-2022:3668-1 Security update for go1.18

This update for go1.18 fixes the following issues: Updated to version 1.18.7 bsc1193742: - CVE-2022-41715: Fixed memory exhaustion in regexp/syntax bsc1204023. - CVE-2022-2879: Fixed unbounded memory consumption when reading headers in archive/tar bsc1204024. - CVE-2022-2880: Fixed ReverseProxy...

CVE-2022-25897

A flaw was found in the Eclipse Milo SDK Server. This flaw allows an attacker to consume the application memory, leading to a denial of service by sending specific requests...

Mageia: Security Advisory (MGASA-2022-0377)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0377 Updated golang packages fix security vulnerability

regexp/syntax: limit memory used by parsing regexps CVE-2022-41715 archive/tar: unbounded memory consumption when reading headers CVE-2022-2879 net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-2880...