Lucene search
K

253 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.1 views

SUSE CVE-2018-5336

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth...

4.3CVSS6.8AI score0.01011EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.2 views

SUSE CVE-2018-9256

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth...

5.3CVSS7.6AI score0.00739EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2022/08/01 6:50 p.m.5 views

CVE-2022-31173 Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually...

7.5CVSS7.7AI score0.00615EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/07/29 12:0 a.m.2 views

PT-2025-37090

Name of the Vulnerable Software and Affected Versions: libxml2 versions prior to 2.9.15 Description: An uncontrolled recursion issue in XPath evaluation within libxml2 allows a local attacker to cause a stack overflow through crafted expressions. The XPath processing functions xmlXPathRunEval,...

6.2CVSS6.8AI score0.00066EPSS
Exploits0References47
OSV
OSV
added 2022/05/21 12:0 p.m.19 views

RUSTSEC-2022-0030 Stack overflow during recursive expression parsing

When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. The flaw was corrected in commits 60aa2dc03a by adding a check ...

6.5CVSS6.2AI score0.00521EPSS
Exploits0References3
RustSec
RustSec
added 2022/05/21 12:0 p.m.23 views

Stack overflow during recursive expression parsing

When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. The flaw was corrected in commits 60aa2dc03a by adding a check ...

6.5CVSS3.4AI score0.00521EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2022/05/20 10:45 p.m.15 views

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

6.5CVSS2.3AI score0.00078EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.16 views

Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth...

6.7AI score
Exploits0References4Affected Software1
NVD
NVD
added 2021/07/20 7:15 a.m.12 views

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

5.5CVSS0.00078EPSS
Exploits0References4
OSV
OSV
added 2021/07/20 7:15 a.m.10 views

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

5.5CVSS7AI score
Exploits0References4
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.2 views

open62541 缓冲区错误漏洞

open62541 is an application software. An open source and free implementation of OPC UA OPC Unified Architecture, written in a common subset of the C99 and C++98 languages. A security vulnerability exists in open62541 prior to 1.0.4, which stems from the fact that X has out-of-bounds writes for...

5.5CVSS5.8AI score0.00078EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2015:0488-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.7AI score0.48217EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/05/14 12:0 a.m.2 views

PT-2021-18342 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier Description: TensorFlow is an end-to-end open source...

7.8CVSS7.5AI score0.00022EPSS
Exploits1References16
CNVD
CNVD
added 2020/08/11 12:0 a.m.1 views

Huawei Mate 30 Denial of Service Vulnerability

Huawei Mate 30 is a smartphone from Huawei. A denial of service vulnerability exists in versions prior to Huawei Mate 30 10.1.0.150 C00E136R5P3. The vulnerability stems from the system not properly limiting the recursion depth. An attacker can exploit the vulnerability to cause a denial of servic...

5.5CVSS6.6AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2020/08/10 8:15 p.m.6 views

CVE-2020-9243

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service...

5.5CVSS5.5AI score0.00077EPSS
Exploits0References1
OSV
OSV
added 2020/08/10 8:15 p.m.1 views

CVE-2020-9243

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service...

5.5CVSS6.1AI score0.00077EPSS
Exploits0References1
Huawei
Huawei
added 2020/08/05 12:0 a.m.24 views

Security Advisory - Denial of Service Vulnerability in Several Smartphones

There is a denial of service vulnerability in several smartphones. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service condition. Vulnerability ID:...

5.5CVSS5.5AI score0.00077EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/30 12:0 a.m.0 views

The vulnerabilities of the functions xmlParserEntityCheck and xmlParseAttValueComplex in the libxml2 library allow a hacker to trigger a service failure.

The vulnerabilities of the xmlParserEntityCheck and xmlParseAttValueComplex functions in the parser.c file of the libxml2 library are caused by errors in tracking the depth of recursion. Exploiting these vulnerabilities can allow an attacker, operating remotely, to cause a service failure using a...

7.8CVSS7.4AI score0.00881EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2018/09/17 12:0 p.m.18 views

RUSTSEC-2018-0006 Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not prevent deep recursion while deserializing data structures. This allows an attacker to make a YAML file with deeply nested structures that causes an abort while deserializing it. The flaw was corrected by checking the recursion depth. Note: clap 2.33 is not...

7.5CVSS7.5AI score0.00361EPSS
Exploits0References3
NVD
NVD
added 2018/07/09 9:29 p.m.11 views

CVE-2018-13795

Gravity before 0.5.1 does not support a maximum recursion depth...

7.5CVSS7.5AI score0.00334EPSS
Exploits1References1
Rows per page
Query Builder