Lucene search
+L

8583 matches found

osv_debian
osv_debian
•added 2020/06/04 4:15 p.m.•6 views

DEBIAN-CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS7AI score0.00486EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2020/06/04 4:15 p.m.•23 views

UBUNTU-CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS6.9AI score0.00486EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2020/06/04 4:15 p.m.•35 views

CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS6.9AI score0.00486EPSS
SaveExploits0References6
Prion
Prion
•added 2020/06/04 4:15 p.m.•33 views

Design/Logic Flaw

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

4.9CVSS5.5AI score0.00486EPSS
SaveExploits0References7Affected Software3
Mend
Mend
•added 2020/06/04 3:23 p.m.•4 views

CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

8.1CVSS0.00486EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2020/06/04 3:23 p.m.•49 views

CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

5.8AI score0.00486EPSS
SaveExploits0References7
CVE
CVE
•added 2020/06/04 3:23 p.m.•221 views

CVE-2020-13800

CVE-2020-13800 affects QEMU 4.2.0, specifically ati-vga in hw/display/ati.c. The vulnerability arises when a guest provides a crafted mm_index value, causing infinite recursion in ati_mm_read/ati_mm_write. The described impact indicates a crash (DoS-like behavior) of the QEMU component, not neces...

6CVSS5.6AI score0.00486EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
•added 2020/06/04 3:23 p.m.•83 views

CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS6.8AI score0.00486EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2020/06/04 3:23 p.m.•103 views

CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS5.8AI score0.00486EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/06/04 5:52 a.m.•44 views

CVE-2020-13800

An infinite recursion flaw was found in the ati-vga emulator of the QEMU. The issue occurs in atimmread/write routines while accessing VGA registers, for certain values of the 'mmindex' variable. This flaw allows a guest user or process to crash the QEMU process, resulting in a denial of service...

4.9CVSS5.2AI score0.00486EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•6 views

CVE-2020-13800: Uncontrolled Recursion

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS5.8AI score0.00486EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•4 views

CVE-2019-20819: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing...

7.5CVSS5.7AI score0.01569EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•7 views

CVE-2019-20815: Uncontrolled Recursion

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing...

7.5CVSS5.7AI score0.01569EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/06/04 12:00 a.m.•50 views

Amazon Linux AMI : bind (ALAS-2020-1369)

The version of bind installed on the remote host is prior to 9.8.2-0.68.rc1.64. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1369 advisory. A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed wh...

8.6CVSS6.7AI score0.93422EPSS
SaveExploits7References5
Tenable Nessus
Tenable Nessus
•added 2020/06/04 12:00 a.m.•52 views

Amazon Linux 2 : xorg-x11-server (ALAS-2020-1433)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1433 advisory. It was discovered that libX11 does not properly validate input coming from the server, causing XListExtensions and XGetFontPath functions to produce an invalid list of elements that in turn make...

9.8CVSS6.7AI score0.09341EPSS
SaveExploits0References27
RedhatCVE
RedhatCVE
•added 2020/05/20 2:25 a.m.•35 views

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

5.5CVSS3.9AI score0.01468EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2020/05/19 10:15 p.m.•19 views

UBUNTU-CVE-2020-13164

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem...

7.5CVSS7.1AI score0.02978EPSS
SaveExploits0References6
Mend
Mend
•added 2020/05/19 9:26 p.m.•5 views

CVE-2020-13164

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem...

8.7CVSS0.02978EPSS
SaveExploits0References16
CVE
CVE
•added 2020/05/19 9:26 p.m.•238 views

CVE-2020-13164

Wireshark vulnerable component: NFS dissector (packet-nfs.c) can crash due to excessive recursion in the NFS graph traversal. Affected versions include Wireshark 3.2.0–3.2.3, 3.0.0–3.0.10, and 2.6.0–2.6.16. The root cause is unbounded recursion when encountering cycles in the directory graph on a...

7.5CVSS7.2AI score0.02978EPSS
SaveExploits0References9Affected Software1
AlpineLinux
AlpineLinux
•added 2020/05/19 9:26 p.m.•89 views

CVE-2020-13164

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem...

7.5CVSS7.4AI score0.02978EPSS
SaveExploits0
Rows per page
Query Builder