5763 matches found
Design/Logic Flaw
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2015-3254
Apache Thrift client libraries before 0.9.3 are affected by CVE-2015-3254, which could allow a remote authenticated user to trigger a denial of service via infinite recursion in the skip function. Impact is a partial denial of service (availability affected) with network access and no confidentia...
CVE-2015-3254
Removed by vendor...
DEBIAN-CVE-2017-9729
In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...
CVE-2017-9729
In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...
PT-2017-6654 · Apache +1 · Apache Thrift +1
Name of the Vulnerable Software and Affected Versions: Apache Thrift versions prior to 0.9.3 Description: The issue allows remote authenticated users to cause a denial of service, specifically through infinite recursion, by exploiting vectors related to the skip function. Recommendations: For...
CVE-2017-9616
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...
UBUNTU-CVE-2017-9617
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...
CVE-2017-9616
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...
CVE-2017-9616
CVE-2017-9616 affects Wireshark up to version 2.2.7, where the mp4 dissector (epan/dissectors/file-mp4.c) is vulnerable to stack exhaustion caused by overly deep MP4 box chunks triggering uncontrolled recursion. The description in the Initial Document explicitly identifies this condition and the ...
CVE-2017-9617
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...
CVE-2016-8746
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true...
Design/Logic Flaw
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true...
Design/Logic Flaw
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...
CVE-2017-7515
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...
CVE-2017-7515
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...
DEBIAN-CVE-2017-7515
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...
CVE-2017-7515
CVE-2017-7515 affects poppler (pdfunite) with an uncontrolled recursion that can cause a denial of service. The Initial document states the issue exists in poppler up to version 0.55.0 and is triggered during pdfunite processing. Connected sources confirm this CVE is listed across multiple adviso...
