Lucene search
K

5231 matches found

RedHat Linux
RedHat Linux
added 2021/09/30 7:6 p.m.4 views

ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability...

5.5CVSS6.8AI score0.00162EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/09/30 4:59 p.m.3 views

ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability...

5.5CVSS6.8AI score0.00162EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/09/23 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2021:14800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.6AI score0.04749EPSS
Exploits1References4
OSV
OSV
added 2021/09/21 2:6 p.m.3 views

OPENSUSE-SU-2021:1294-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions bsc1171685. This update was imported from the SUSE:SLE-15-SP2:Update update project...

7.1CVSS7AI score0.04749EPSS
Exploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/09/21 12:0 a.m.65 views

Security update for libcroco (moderate)

openSUSE Security Update: Security update for libcroco Announcement ID: openSUSE-SU-2021:1294-1 Rating: moderate References: 1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 NVD : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 SUSE: 2.8...

2.8CVSS6.5AI score0.04749EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.2 views

The vulnerability of the lyxml_parse_mem() function in the syntax analyzer and data modeling tool YANG Libyang, related to an uncontrolled recursion, allows attackers to cause service failures.

The vulnerability of the lyxmlparsemem function, a syntax analyzer and tool for data modeling in the YANG Libyang language, is related to an uncontrolled recursion in the lyxmlparseelem function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS0.00457EPSS
Exploits1References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/09/17 12:0 a.m.15 views

SUSE SLES11 Security Update : libcroco (SUSE-SU-2021:14800-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14800-1 advisory. - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption. CVE-2020-12825 Note that Nessu...

7.1CVSS6.6AI score0.04749EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2021/09/17 12:0 a.m.23 views

SUSE SLED15 / SLES15 Security Update : libcroco (SUSE-SU-2021:3123-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3123-1 advisory. - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption. CVE-2020-12825 Note tha...

7.1CVSS6.6AI score0.04749EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2021/09/17 12:0 a.m.18 views

openSUSE: Security Advisory for libcroco (openSUSE-SU-2021:3123-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1CVSS7.3AI score0.04749EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.2 views

Cookiex-Deep 安全漏洞

Cookiex-Deep is a library. It is used to add object recursion to a target. Cookiex-Deep has a security vulnerability that can be exploited by an attacker to cause proto objects to contaminate global proto objects...

9.8CVSS8.2AI score0.005EPSS
Exploits1References4
OSV
OSV
added 2021/09/16 5:45 p.m.5 views

OPENSUSE-SU-2021:3123-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions bsc1171685...

7.1CVSS7.1AI score0.04749EPSS
Exploits1References3
OSV
OSV
added 2021/09/16 5:45 p.m.5 views

SUSE-SU-2021:3123-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions bsc1171685...

7.1CVSS6.9AI score0.04749EPSS
Exploits1References3
OSV
OSV
added 2021/09/16 5:44 p.m.2 views

SUSE-SU-2021:14800-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions bsc1171685...

7.1CVSS6.9AI score0.04749EPSS
Exploits1References3
Kitploit
Kitploit
added 2021/09/10 8:30 p.m.34 views

WWWGrep - OWASP Foundation Web Respository

WWWGrep is a rapid search “grepping” mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed. Header names and values may also be recursively searched in this manner. WWWGrep was...

7.5AI score
Exploits0References1
OSV
OSV
added 2021/09/07 3:15 p.m.1 views

DEBIAN-CVE-2021-39257

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

5.5CVSS6.5AI score0.00162EPSS
Exploits0References1
OSV
OSV
added 2021/09/07 3:15 p.m.3 views

AZL-6762 CVE-2021-39257 affecting package ntfs-3g for versions less than 2021.8.22-1

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

5.5CVSS6.7AI score0.00162EPSS
Exploits0References1
OSV
OSV
added 2021/09/07 3:15 p.m.0 views

UBUNTU-CVE-2021-39257

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

5.5CVSS6.8AI score0.00162EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/09/06 12:0 a.m.19 views

ISC BIND DoS Vulnerability (CVE-2017-3137) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.5CVSS7.5AI score0.28496EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/09/06 12:0 a.m.22 views

ISC BIND DoS Vulnerability (CVE-2017-3137) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.5CVSS7.5AI score0.28496EPSS
Exploits0References1
Oracle linux
Oracle linux
added 2021/09/01 12:0 a.m.59 views

hivex security update

1.3.10-6.12 - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976193...

4.3CVSS2.1AI score0.00583EPSS
Exploits1
Rows per page
Query Builder