PT-2020-16529

Name of the Vulnerable Software and Affected Versions Play Framework versions 2.6.0 through 2.8.2 Description The issue is caused by unbounded recursion during parsing of crafted JSON documents, leading to stack consumption. Recommendations For Play Framework versions 2.6.0 through 2.8.2, update ...

CVE-2020-26882: Uncontrolled Recursion

In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input...

CVE-2020-26883: Uncontrolled Recursion

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents...

PT-2020-6887

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.17.2 and earlier, 1.18.x versions prior to 1.18.3 MySQL Server version 8.0.23 and earlier Description The issue is related to unbounded recursion via an ASN.1-encoded Kerberos message due to the lack of a recursion...

CVE-2020-28196: Uncontrolled Recursion

MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1encode.c support for BER indefinite lengths lacks a recursion limit...

Huawei EulerOS: Security Advisory for libcroco (EulerOS-SA-2020-2447)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tcpdump smb_fdata() DoS

The vulnerability of the smbfdata function smbutil.c in the tool for capturing and analyzing network traffic, tcpdump, is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c

An uncontrolled resource consumption flaw was discovered in the way tcpdump prints BGP packets. The BGP protocol allows ATTRSET to be nested as many times as the message can accommodate, however when a specially crafted packet is crafted and parsed by tcpdump, this may lead to stack exhaustion du...

tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2020-2360)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-9861: Uncontrolled Recursion

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

EulerOS 2.0 SP8 : libproxy (EulerOS-SA-2020-2304)

According to the versions of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered...

Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri()

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

Amazon Linux 2 : libcroco (ALAS-2020-1521)

The version of libcroco installed on the remote host is prior to 0.6.12-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1521 advisory. A stack overflow flaw was found in libcroco. A service using libcroco's CSS parser could be crashed by a local, authenticated...

PT-2020-6035

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to improper initialization that can lead to recursion-based stack consumption or other consequences. This occurs because the use of certain getc functions is mishandled when a clie...

Prototype Pollution

Overview chart.js is a Simple HTML5 charts using the canvas element. Affected versions of this package are vulnerable to Prototype Pollution. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deep...

XACK DNS Server DoS

The vulnerability of the XACK DNS server stems from an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2020-2183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2020-2184)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

glibc Heap Buffer Overflow DoS

The vulnerability of the glibc library is related to uncontrolled recursion during the search for matches using a regular expression. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...