Lucene search
K

5224 matches found

OSV
OSV
added 2025/12/14 11:15 p.m.3 views

DEBIAN-CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.2AI score0.00007EPSS
Exploits0References1
OSV
OSV
added 2025/12/14 11:15 p.m.2 views

AZL-72379 CVE-2025-67899 affecting package uriparser 0.9.8-3

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.7AI score0.00007EPSS
Exploits0References1
OSV
OSV
added 2025/12/14 11:15 p.m.1 views

AZL-72862 CVE-2025-67899 affecting package uriparser 0.9.7-2

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.7AI score0.00007EPSS
Exploits0References1
NVD
NVD
added 2025/12/14 11:15 p.m.2 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS0.00007EPSS
Exploits0References3
OSV
OSV
added 2025/12/14 11:15 p.m.0 views

UBUNTU-CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.8AI score0.00007EPSS
Exploits0References4
Snyk
Snyk
added 2025/12/14 10:39 p.m.3 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the ParseMustBeSegmentNzNc function when processing large input containing many commas. An attacker can cause excessive stack consumption and application crash by supplying specially crafted input. Remediation...

4CVSS6.8AI score0.00007EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/12/14 10:17 p.m.3 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS6.8AI score0.00007EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/12/14 10:17 p.m.3 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.2AI score0.00007EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/12/14 10:17 p.m.3 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS6.6AI score0.00007EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/14 10:17 p.m.11 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS0.00007EPSS
Exploits0References2
CVE
CVE
added 2025/12/14 10:17 p.m.20 views

CVE-2025-67899

CVE-2025-67899 affects uriparser up to version 0.9.9, where unbounded recursion leads to stack consumption on large inputs (ParseMustBeSegmentNzNc with many commas). Connected advisories confirm the issue and direct upgrade to uriparser-1.0.0 as the remediation (e.g., Fedora/FEDORA advisories). O...

2.9CVSS6.6AI score0.00007EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.2 views

Uriparser 安全漏洞

Uriparser is a strictly Rfc 3986 compliant Uri parsing and processing library written in C89. A security vulnerability exists in Uriparser version 0.9.9 and earlier, which stems from allowing infinite recursion and stack consumption...

2.9CVSS6.5AI score0.00007EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/12/11 8:15 p.m.2 views

commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

An uncontrolled recursion flaw was found in the Apache Commons Lang library. The ClassUtils.getClass... method can throw a StackOverflowError on very long inputs. Since this error is typically not handled by applications and libraries, a StackOverflowError may lead to the termination of an...

5.3CVSS7.1AI score0.00099EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.1 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991130 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive lockin...

5.5CVSS6.1AI score0.00051EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/09 10:36 p.m.13 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service using a specially crafted SQL statement (CVE-2025-33143).

Summary IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service using a specially crafted SQL statement that performs uncontrolled recursion. Vulnerability Details CVEID:CVE-2025-33143 DESCRIPTION: IBM Db2 for Linux, UNIX and...

6.5AI score
Exploits0Affected Software1
NVD
NVD
added 2025/12/09 4:17 p.m.2 views

CVE-2025-40327

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...

0.00026EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/12/09 3:24 p.m.4 views

Important: Red Hat Security Advisory: Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2

Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2 Kiali 2.17.2, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently. Security Fixes:...

8.7CVSS6.9AI score0.00071EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2025/12/09 2:59 p.m.4 views

Important: Red Hat Security Advisory: Kiali 2.11.5 for Red Hat OpenShift Service Mesh 3.1

Kiali 2.11.5 for Red Hat OpenShift Service Mesh 3.1 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Kiali 2.11.5, for Red...

8.7CVSS6.9AI score0.00071EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2025/12/09 2:58 p.m.5 views

Important: Red Hat Security Advisory: Kiali 1.73.25 for Red Hat OpenShift Service Mesh 2.6

Kiali 1.73.25 for Red Hat OpenShift Service Mesh 2.6 Kiali 1.73.25, for Red Hat OpenShift Service Mesh 2.6, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently Security Fixes:...

8.7CVSS6.9AI score0.00071EPSS
Exploits2References7
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49750

In the Linux kernel, the following vulnerability has been resolved: s390/idle: mark arch cpu idle noinstr linux-next commit "cpuidle: tracing: Warn about !rcu is watching" adds a new warning which hits on s390's arch cpu idle function: RCU not on for: arch cpu idle+0x0/0x28 WARNING: CPU: 2 PID: 0...

6.3AI score0.00028EPSS
Exploits0References4
Rows per page
Query Builder