Cisco IOS LISP DoS

The vulnerability of the LISP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to uncontrolled recursion during the processing of LISP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2024-3247

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

UBUNTU-CVE-2024-3248

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

CVE-2024-3248 Stack overflow in Xpdf 4.05 due to object loop in attachments

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

CVE-2024-3248

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

CVE-2024-3247

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

CVE-2024-3247

CVE-2024-3247 affects Xpdf up to version 4.05 (and earlier). The issue is a PDF object loop in an object stream that can trigger infinite recursion and a stack overflow, enabling a local attack surface and potential denial-of-service when processing crafted PDFs. Fedora advisories indicate remedi...

CVE-2024-3247

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

CVE-2024-3248: Uncontrolled Recursion

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

CVE-2024-3247: Uncontrolled Recursion

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

XPdf security vulnerabilities

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a PDF object loop that can lead to infinite recursion and stack overflow...

XPdf security vulnerabilities

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a PDF object loop that can lead to infinite recursion and stack overflow...

PT-2024-8490

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description The issue is related to an infinite recursion in the fib6 dump done function during netlink socket destruction. This occurs when syzkaller sends an AF UNSPEC RTM GETROUTE message and...

CVE-2023-51803: Uncontrolled Recursion

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the " " substring...

CVE-2024-20311: Uncontrolled Recursion

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

expat security update

2.5.0-1.1 - CVE-2023-52425: Fix parsing of large tokens - CVE-2024-28757: Reject direct parameter entity recursion - Resolves: RHEL-29698 - Resolves: RHEL-29695...

squid: Denial of Service in HTTP Chunked Decoding

A flaw was found in Squid. This issue may allow a remote attacker to trigger an uncontrolled recursion bug when sending a specially crafted, chunked, encoded HTTP Message, resulting in a denial of service...

CVE-2024-28243: Uncontrolled Recursion

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

CVE-2024-28244: Uncontrolled Recursion

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \def or \newcommand that causes a near-infinite loop, despite setting maxExpand to avoid such loops. KaTeX supports an option named...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1423)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...