Lucene search
+L

8494 matches found

osv_cve
osv_cve
•added 2019/07/04 10:15 p.m.•21 views

CVE-2019-13288

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.5CVSS6.5AI score0.04556EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2019/07/04 10:15 p.m.•16 views

UBUNTU-CVE-2019-13288

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.5CVSS6.2AI score0.04556EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2019/07/04 10:15 p.m.•87 views

CVE-2019-13288

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.5CVSS6.3AI score0.04556EPSS
SaveExploits1References2
Prion
Prion
•added 2019/07/04 10:15 p.m.•50 views

Design/Logic Flaw

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

4.3CVSS5.7AI score0.04556EPSS
SaveExploits2References1Affected Software1
EUVD
EUVD
•added 2019/07/04 9:06 p.m.•18 views

EUVD-2019-4794

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

6.5CVSS6AI score0.04556EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2019/07/04 9:06 p.m.•76 views

CVE-2019-13288

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.9AI score0.04556EPSS
SaveExploits1References1
CVE
CVE
•added 2019/07/04 9:06 p.m.•194 views

CVE-2019-13288

CVE-2019-13288 affects Xpdf 4.01.01: the Parser::getObj() function in Parser.cc may recurse infinitely when processing a crafted file, enabling a remote DoS. Connected Debian tracker confirms the same description. No explicit remediation or affected versions beyond the cited release are provided ...

5.5CVSS5.7AI score0.04556EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2019/07/04 9:06 p.m.•136 views

CVE-2019-13288

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.5CVSS5.3AI score0.04556EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2019/07/04 12:00 a.m.•18 views

PT-2019-13240 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: The issue allows a remote attacker to cause a denial-of-service DoS attack via a crafted file, leveraging infinite recursion in the Parser::getObj function. Recommendations: For Xpdf version 4.01.01, as a...

5.5CVSS5.9AI score0.04556EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/04 12:00 a.m.•5 views

CVE-2019-13288: Uncontrolled Recursion

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.5CVSS6.3AI score0.04556EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2019/07/01 3:15 p.m.•10 views

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

7.8CVSS5.5AI score0.01415EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/01 12:00 a.m.•8 views

CVE-2019-13129: Uncontrolled Recursion

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

7.8CVSS5.8AI score0.01415EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/07/01 12:00 a.m.•7 views

PT-2019-13144

Name of the Vulnerable Software and Affected Versions Motorola router CX2L MWR04L version 1.01 Description The issue is caused by a stack consumption problem due to infinite recursion in the scopd service. This occurs via TCP port 8010 and UDP port 8080, and is a result of the snprintf function a...

7.8CVSS0.01415EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2019/06/11 12:02 p.m.•14 views

haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2019/05/31 12:00 a.m.•72 views

Amazon Linux 2 : poppler (ALAS-2019-1217)

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h. A crafted input will lead to a remote denial of service attack. Poppler versions later than 0.41.0 are not affected.CVE-2018-10768 The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler allows...

6.5CVSS6.4AI score0.0311EPSS
SaveExploits3References4
Amazon
Amazon
•added 2019/05/29 12:00 a.m.•55 views

Low: poppler

Issue Overview: There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h. A crafted input will lead to a remote denial of service attack. Poppler versions later than 0.41.0 are not affected.CVE-2018-10768 The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in...

6.5CVSS6.5AI score0.0311EPSS
SaveExploits3
osv_cve
osv_cve
•added 2019/05/23 12:29 p.m.•18 views

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score
SaveExploits0References8
osv_debian
osv_debian
•added 2019/05/23 12:29 p.m.•6 views

DEBIAN-CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score0.03765EPSS
SaveExploits0References1
Mend
Mend
•added 2019/05/23 11:56 a.m.•4 views

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

8.7CVSS0.03765EPSS
SaveExploits0References14
Debian CVE
Debian CVE
•added 2019/05/23 11:56 a.m.•66 views

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS2.6AI score0.03765EPSS
SaveExploits0
Rows per page
Query Builder