Lucene search
+L

1648 matches found

OSV
OSV
added 2023/10/30 3:08 p.m.31 views

GHSA-3Q6M-V84F-6P9H quic-go vulnerable to pointer dereference that can lead to panic

quic-go is an implementation of the QUIC transport protocol in Go. By serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference leading to a panic when the node attempted to drop the Handshake packet number space...

7.5CVSS7.3AI score0.00765EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2023/10/30 3:08 p.m.41 views

quic-go vulnerable to pointer dereference that can lead to panic

quic-go is an implementation of the QUIC transport protocol in Go. By serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference leading to a panic when the node attempted to drop the Handshake packet number space...

7.5CVSS7.2AI score0.00765EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2023/10/26 7:18 p.m.61 views

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.7.9 security and bug fix updates

Red Hat Advanced Cluster Management for Kubernetes 2.7.9 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS8.4AI score0.99999EPSS
SaveExploits21References43
RedHat Linux
RedHat Linux
added 2023/10/25 5:59 p.m.63 views

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.3 security and bug fix updates

Red Hat Advanced Cluster Management for Kubernetes 2.8.3 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS8.9AI score0.99999EPSS
SaveExploits21References45
OpenVAS
OpenVAS
added 2023/10/25 12:00 a.m.50 views

Fedora: Security Advisory for mvfst (FEDORA-2023-17efd3f2cd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.6AI score0.99999EPSS
SaveExploits21References4
OpenVAS
OpenVAS
added 2023/10/25 12:00 a.m.42 views

Fedora: Security Advisory for mvfst (FEDORA-2023-2a9214af5f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.6AI score0.99999EPSS
SaveExploits21References4
Fedora
Fedora
added 2023/10/24 1:23 a.m.58 views

[SECURITY] Fedora 38 Update: mvfst-2023.10.16.00-1.fc38

mvfst Pronounced move fast is a client and server implementation of IETF QU IC protocol in C++ by Facebook. QUIC is a UDP based reliable, multiplexed transp ort protocol that will become an internet standard. The goal of mvfst is to build a performant implementation of the QUIC transport protocol...

7.5CVSS8.5AI score0.99999EPSS
SaveExploits21
Fedora
Fedora
added 2023/10/24 1:13 a.m.59 views

[SECURITY] Fedora 37 Update: mvfst-2023.10.16.00-1.fc37

mvfst Pronounced move fast is a client and server implementation of IETF QU IC protocol in C++ by Facebook. QUIC is a UDP based reliable, multiplexed transp ort protocol that will become an internet standard. The goal of mvfst is to build a performant implementation of the QUIC transport protocol...

7.5CVSS8.5AI score0.99999EPSS
SaveExploits21
Veracode
Veracode
added 2023/10/16 8:15 a.m.29 views

Denial Of Service (DoS)

Microsoft QUIC is vulnerable to Denial of Service DOS. The vulnerability is due to a memory leak in the QuicCryptoTlsReadExtensions function in cryptotls.c, which results in Denial of Service. An attacker can create multiple instances are present or multiple calls to the decode happen...

7.5CVSS6.9AI score0.05473EPSS
SaveExploits0References2Affected Software4
CNVD
CNVD
added 2023/10/13 12:00 a.m.58 views

Microsoft QUIC Denial of Service Vulnerability

Microsoft QUIC is a network transport protocol from Microsoft. A denial of service vulnerability exists in Microsoft QUIC, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.4AI score0.05473EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/13 12:00 a.m.70 views

Microsoft QUIC Denial of Service Vulnerability (CNVD-2023-92205)

Microsoft QUIC is a network transport protocol from Microsoft. A denial of service vulnerability exists in Microsoft QUIC, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.4AI score0.69494EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/10/12 6:20 a.m.31 views

Denial Of Service (DoS)

Microsoft QUIC is vulnerable to Denial Of Service DoS. The vulnerability is due to the library allowing version negotiation packets for server connections, which enables an attacker to crash the application...

7.5CVSS6.8AI score0.69494EPSS
SaveExploits0References4Affected Software4
Snyk
Snyk
added 2023/10/10 10:23 p.m.6 views

Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Overview Affected versions of this package are vulnerable to Improper Release of Memory Before Removing Last Reference 'Memory Leak' in the QUIC transport parameters when multiple instances are present or multiple calls to the decode happen. An attacker can cause a denial of service when the MsQu...

7.5CVSS6.8AI score0.05473EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/10/10 10:23 p.m.7 views

Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Overview Affected versions of this package are vulnerable to Improper Release of Memory Before Removing Last Reference 'Memory Leak' in the QUIC transport parameters when multiple instances are present or multiple calls to the decode happen. An attacker can cause a denial of service when the MsQu...

7.5CVSS6.8AI score0.05473EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/10 6:15 p.m.19 views

CVE-2023-38171

Microsoft QUIC Denial of Service Vulnerability...

7.5CVSS7.4AI score0.69494EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 6:15 p.m.29 views

CVE-2023-38171

Microsoft QUIC Denial of Service Vulnerability...

7.5CVSS7AI score
SaveExploits0References1
OSV
OSV
added 2023/10/10 6:15 p.m.8 views

CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability...

7.5CVSS7.2AI score
SaveExploits0References1
NVD
NVD
added 2023/10/10 6:15 p.m.27 views

CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability...

7.5CVSS7.4AI score0.05473EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/10 6:15 p.m.24 views

Denial of service

Microsoft QUIC Denial of Service Vulnerability...

5CVSS7.3AI score0.69494EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2023/10/10 6:15 p.m.22 views

Denial of service

Microsoft QUIC Denial of Service Vulnerability...

5CVSS7.3AI score0.05473EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder