Lucene search
K

5279 matches found

UbuntuCve
UbuntuCve
added 2024/03/18 11:15 a.m.36 views

CVE-2024-26639

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.9AI score
Exploits0References5
Cvelist
Cvelist
added 2024/03/18 10:19 a.m.18 views

CVE-2024-26639

...

7.6AI score
Exploits0
CVE
CVE
added 2024/03/18 10:19 a.m.100 views

CVE-2024-26639

CVE-2024-26639 entry is rejected/not used and does not represent an active vulnerability entry.

7.8AI score
Exploits0
Debian CVE
Debian CVE
added 2024/03/18 10:19 a.m.25 views

CVE-2024-26639

Removed by vendor...

6.3AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:0 a.m.1 views

The vulnerability of the HttpStateData() function in the Chunked decoder of the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the HttpStateData function in the Chunked decoder of the Squid proxy server is related to buffer overflows in the stack due to uncontrolled recursion during HTTP message processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

8.6CVSS7.9AI score0.03932EPSS
Exploits0References7Affected Software3
RedhatCVE
RedhatCVE
added 2024/03/16 9:9 p.m.12 views

CVE-2022-41404

An infinite recursion vulnerability was found in the org.ini4j package. This flaw allows triggering the fetch method to cause a denial of service...

7.5CVSS7.2AI score0.00786EPSS
Exploits1References5
CNVD
CNVD
added 2024/03/12 12:0 a.m.4 views

Squid Denial of Service Vulnerability (CNVD-2024-13541)

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A denial of service vulnerability exists in Squid that stems from the presence of a recursion error, which can be...

8.6CVSS6.4AI score0.03932EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:0 a.m.64 views

EulerOS 2.0 SP8 : squid (EulerOS-SA-2024-1301)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6....

8.6CVSS7.2AI score0.09621EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:0 a.m.36 views

EulerOS 2.0 SP8 : bind (EulerOS-SA-2024-1256)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...

7.5CVSS6.9AI score0.00227EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/12 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1256)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00227EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 7:15 p.m.1 views

DEBIAN-CVE-2024-25111

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS7.8AI score0.03932EPSS
Exploits0References1
NVD
NVD
added 2024/03/06 7:15 p.m.13 views

CVE-2024-25111

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS8.2AI score0.03932EPSS
Exploits0References6
OSV
OSV
added 2024/03/06 7:15 p.m.0 views

UBUNTU-CVE-2024-25111

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS7.2AI score0.03932EPSS
Exploits0References6
CVE
CVE
added 2024/03/06 6:14 p.m.260 views

CVE-2024-25111

Squid (web proxy cache) is affected by CVE-2024-25111. Affected versions are 3.5.27 up to, but not including, 6.8; the issue is an uncontrolled recursion in the HTTP Chunked decoder that can cause a remote DoS when processing crafted chunked HTTP messages. The vulnerability is fixed in Squid vers...

8.6CVSS8.3AI score0.03932EPSS
Exploits0References6Affected Software1
AlpineLinux
AlpineLinux
added 2024/03/06 6:14 p.m.31 views

CVE-2024-25111

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS6.7AI score0.03932EPSS
Exploits0References6
OSV
OSV
added 2024/03/06 6:14 p.m.3 views

CVE-2024-25111 SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS8.3AI score0.03932EPSS
Exploits0References8
OSV
OSV
added 2024/03/06 11:18 a.m.14 views

BIT-TENSORFLOW-2021-29615 Stack overflow in `ParseAttrValue` with nested tensors

TensorFlow is an end-to-end open source platform for machine learning. The implementation of ParseAttrValuehttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attrvalueutil.ccL397-L453 can be tricked into stack overflow due to recursion...

5.5CVSS5.6AI score0.0001EPSS
Exploits1References3
OSV
OSV
added 2024/03/06 11:9 a.m.22 views

BIT-MOODLE-2021-36395

In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service...

7.5CVSS7.3AI score0.00667EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 11:9 a.m.10 views

BIT-TYPO3-2022-36104

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as an error message from another page. This leads t...

7.5CVSS6.3AI score0.0056EPSS
Exploits0References3
OSV
OSV
added 2024/03/06 11:7 a.m.29 views

BIT-MEDIAWIKI-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.6AI score0.00067EPSS
Exploits1References5
Rows per page
Query Builder