3431 matches found
SUSE CVE-2023-26048
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part...
GHSA-QW69-RQJ8-6QW8 OutOfMemoryError for large multipart without filename in Eclipse Jetty
Impact Servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part that has a name but no filename and a very large content. This...
DEBIAN-CVE-2023-26048
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part...
curl: HTTP multi-header compression denial of service
A flaw was found in the Curl package. A malicious server can insert an unlimited number of compression steps. This decompression chain could result in out-of-memory errors...
Eclipse Jetty 资源管理错误漏洞
Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A resource management error vulnerability exists in Eclipse Jetty that originates when an attacker client may send a large multipart request, causing the server to throw an...
Debian dla-3393 : libprotobuf-dev - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3393 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3393-1 [email protected]...
Bento4 Denial of Service Vulnerability (CNVD-2023-69815)
Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 v1.6.0-639, which stems from an out-of-memory issue in the mp42avc component. An attacker can exploit this vulnerability to cause a denial of service...
PT-2023-5109 · Eclipse +4 · Eclipse Jetty +4
Name of the Vulnerable Software and Affected Versions: Eclipse Jetty versions prior to 9.4.51 Eclipse Jetty versions prior to 10.0.14 Eclipse Jetty versions prior to 11.0.14 Description: The vulnerability is related to the HttpServletRequest.getParameter and HttpServletRequest.getParts functions ...
CVE-2023-29573
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...
Design/Logic Flaw
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...
CVE-2023-29573
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...
CVE-2023-29573
CVE-2023-29573 concerns Bento4 v1.6.0-639 with an out-of-memory bug in the mp4info component. The connected sources confirm the description across multiple feeds (Red Hat, NVD, OSV, etc.). The documents do not provide a remediation or fixed version. Metrics indicate a LOCAL attack vector, LOW att...
CVE-2023-29573
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...
PT-2023-22313 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: The issue is related to an out-of-memory bug in the mp4info component. Recommendations: For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that contains a fix for...
CVE-2023-29573: Allocation of Resources Without Limits or Throttling
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...
EulerOS 2.0 SP8 : curl (EulerOS-SA-2023-1590)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the 'chained' HTTP compression algorithms,...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from an out-of-memory issue in the mp4info component...
CVE-2023-29573
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...