CVE-2023-31794

CVE-2023-31794 affects MuPDF v1.21.1, where an infinite recursion in pdf_mark_list_push enables Denial of Service via crafted PDFs. Public details describe the vulnerability and its impact: DoS with potential for high availability impact (CVE base score 5.5, AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). ...

Artifex Software MuPDF Security Vulnerability

Artifex Software MuPDF is a free and lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF v1.21.1, which originates from the inclusion of infinite recursion in the component pdfmarklistpush. An attacker could exploit this vulnerability to...

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

PT-2023-9219

Name of the Vulnerable Software and Affected Versions MuPDF version 1.21.1 Description The issue is related to an infinite recursion in the pdf mark list push component, which can be exploited by attackers to cause a Denial of Service DoS via a crafted PDF file. This allows an attacker to disrupt...

Updated bind packages fix security vulnerabilities

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

Advisory ROSA-SA-2023-2279

Software: bind 9.11.4 OS: rosa-server79 packageevrstring: bind-9.11.4-26.P2.res7.15.x8664.rpm CVE-ID: CVE-2023-2828 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Each named instance configured to act as a recursive resolver maintains a cache database containing responses to queries it has recently sent ...

Squid DoS Vulnerability (GHSA-72c2-c3wm-8qxc, SQUID-2024:1)

Squid is prone to a denial of service DoS vulnerability in the HTTP Chunked Decoding. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Libx11: stack exhaustion from infinite recursion in putsubimage()

...

Rocky Linux 9 : bind (RLSA-2023:5689)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5689 advisory. - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by th...

Poppler Heap Buffer Overflow DoS

The vulnerability of the FoFiType1C::convertToType1 function in the Poppler PDF rendering library is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Poppler Library Uncontrolled Recursion DoS

The vulnerability of the Poppler library for rendering PDF files is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

CLSA-2023-1697136232 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697135570 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697135138 bind: Fix of CVE-2023-3341

Limit iscccccfromwire recursion depth CVE-2023-3341...

CLSA-2023-1697134824 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697134618 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697134400 Fix CVE(s): CVE-2023-3341

SECURITY UPDATE: A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly - debian/patches/CVE-2023-3341.patch: Named and rndc do not need a lot of recursion so the depth is set to 10. - CVE-2023-3341...