Lucene search
+L

1299 matches found

Veracode
Veracode
added 2018/07/31 8:12 a.m.25 views

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass a rar file to the copyfromlzsswindow function in archivereadsupportformatrar.c file to cause an out-of-bounds read that can crash the application...

5.5CVSS6AI score0.023EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2018/06/20 12:00 a.m.23 views

Apache Tika < 1.19 Junrar DoS Vulnerability

Apache Tika is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika";...

5.5CVSS5.4AI score0.01187EPSS
SaveExploits0References2
Veracode
Veracode
added 2018/06/18 1:55 a.m.22 views

Denial Of Service (DoS)

junrar is vulnerable to denial of service DoS attacks. The vulnerability exists due to an infinite loop that can occur when handling RAR files which has long headers...

5.5CVSS5.3AI score0.01187EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2018/06/15 7:19 p.m.28 views

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

5.5CVSS2.1AI score0.01187EPSS
SaveExploits0References2
Prion
Prion
added 2018/06/14 4:29 p.m.19 views

Denial of service

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

4.3CVSS5.3AI score0.01187EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/06/14 4:29 p.m.18 views

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

5.5CVSS5.7AI score
SaveExploits0References2
NVD
NVD
added 2018/06/14 4:29 p.m.24 views

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

5.5CVSS5.4AI score0.01187EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/06/14 4:00 p.m.27 views

CVE-2018-12418

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files...

5.4AI score0.01187EPSS
SaveExploits0References2
CVE
CVE
added 2018/06/14 4:00 p.m.88 views

CVE-2018-12418

CVE-2018-12418 affects Junrar before 1.0.1 and is triggered by processing corrupt RAR files in Archive.java, used by Apache Tika and other products. The vulnerability allows a denial-of-service via an infinite loop, with the root cause in Archive.java. In practice, exploitation could occur when a...

5.5CVSS5.3AI score0.01187EPSS
SaveExploits0References2Affected Software1
ArchLinux
ArchLinux
added 2018/06/09 12:00 a.m.34 views

[ASA-201806-6] p7zip: arbitrary code execution

Arch Linux Security Advisory ASA-201806-6 ========================================= Severity: Critical Date : 2018-06-09 CVE-ID : CVE-2018-10115 Package : p7zip Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-714 Summary ======= The package p7zip before...

7.8CVSS3.2AI score0.04705EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2018/05/11 12:00 a.m.367 views

7-Zip < 18.05 Memory Corruption Arbitrary Code Execution

The version of 7-Zip installed on the remote Windows host contains a flaw in the NArchive::NRar::CHandler::Extract method in Archive/Rar/RarHandler.cpp. The issue is triggered as certain input is not properly validated when performing 'solid' decompression of a RAR archive. With a specially craft...

7.8CVSS7.4AI score0.04705EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2018/05/11 12:00 a.m.68 views

7zip < 18.05 RAR DoS Vulnerability - Windows

7zip is prone to a RAR denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:7-zip:7-zip"; if...

7.8CVSS7.2AI score0.04705EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/05/03 12:00 a.m.8 views

7-Zip Remote Code Execution Vulnerability

7-Zip is a free, open source compression/decompression software. A security vulnerability exists in 7-Zip version 18.03 and earlier, which stems from faulty initialization logic in the program. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error or...

7.8CVSS9.4AI score0.04705EPSS
SaveExploits1References1
Prion
Prion
added 2018/05/02 9:29 p.m.28 views

Design/Logic Flaw

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

6.8CVSS7.9AI score0.04705EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2018/05/02 9:29 p.m.5 views

DEBIAN-CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS8.3AI score0.04705EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2018/05/02 9:29 p.m.40 views

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS7.3AI score0.04705EPSS
SaveExploits1References3
OSV
OSV
added 2018/05/02 9:29 p.m.5 views

UBUNTU-CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS7.5AI score0.04705EPSS
SaveExploits1References4
OSV
OSV
added 2018/05/02 9:29 p.m.6 views

ALPINE-CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS7.8AI score0.04705EPSS
SaveExploits1References1
OSV
OSV
added 2018/05/02 9:29 p.m.41 views

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS8.1AI score
SaveExploits0References4
NVD
NVD
added 2018/05/02 9:29 p.m.19 views

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

7.8CVSS8AI score0.04705EPSS
SaveExploits1References4
Rows per page
Query Builder