Lucene search
K

5224 matches found

AlpineLinux
AlpineLinux
added 2021/03/09 7:14 p.m.38 views

CVE-2021-20255

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

5.5CVSS6.7AI score0.00228EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.2 views

PT-2021-7314 · Qemu +3 · Qemu +3

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry...

8.6CVSS6.3AI score0.02126EPSS
Exploits6References230
NVD
NVD
added 2021/03/05 6:15 p.m.9 views

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

7.5CVSS0.0028EPSS
Exploits1References1
OSV
OSV
added 2021/03/05 6:15 p.m.10 views

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

7.5CVSS6.8AI score
Exploits0References1
Prion
Prion
added 2021/03/05 6:15 p.m.14 views

Design/Logic Flaw

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

5CVSS7.5AI score0.0028EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/03/05 5:46 p.m.61 views

CVE-2021-28040

CVE-2021-28040 describes an uncontrolled recursion in OSSEC 3.6.0 due to unrestrained recursion in os_xml.c when processing a large number of opening/closing XML tags. The recursion in _ReadElem can cause a segmentation fault once unmapped memory is reached. This entry provides no exploit details...

7.5CVSS7.5AI score0.0028EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1403)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00742EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00742EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1487)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00742EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-1388)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.01079EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1410)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00742EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/03/05 12:0 a.m.4 views

OSSEC 安全漏洞

Scott R. Shinn OSSEC is Scott R. Shinn an open source application. OSSEC provides a simple, powerful and open source solution that combines all aspects of HIDS Host Based Intrusion Detection, log monitoring and SIM,SIEM. A security vulnerability exists in OSSEC 3.6.0, which stems from the...

7.5CVSS7.3AI score0.0028EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2021-1530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.00717EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:0 a.m.35 views

EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2021-1548)

According to the versions of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificatio...

7.5CVSS6.8AI score0.00742EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:0 a.m.33 views

EulerOS Virtualization for ARM 64 3.0.6.0 : krb5 (EulerOS-SA-2021-1544)

According to the version of the krb5 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos...

7.5CVSS7.4AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/02/22 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1287)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00742EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:0 a.m.30 views

EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2021-1312)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the...

7.5CVSS7.6AI score0.00955EPSS
Exploits0References2
Rows per page
Query Builder