Lucene search
+L

8366 matches found

Positive Technologies
Positive Technologies
•added 2018/12/19 12:00 a.m.•22 views

PT-2022-21158 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to uncontrolled recursion in the GitHub repository gpac/gpac. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

9.8CVSS6.8AI score0.04615EPSS
SaveExploits150References373
OSV
OSV
•added 2018/12/12 5:29 p.m.•12 views

DEBIAN-CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0References1
NVD
NVD
•added 2018/12/12 5:29 p.m.•29 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS7.4AI score0.06593EPSS
SaveExploits0References7
Prion
Prion
•added 2018/12/12 5:29 p.m.•44 views

Stack overflow

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

5CVSS7.3AI score0.06593EPSS
SaveExploits0References7Affected Software3
osv-cve
osv-cve
•added 2018/12/12 5:29 p.m.•43 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score
SaveExploits0References7
CVE
CVE
•added 2018/12/12 5:00 p.m.•302 views

CVE-2018-20103

CVE-2018-20103 affects HAProxy versions up to 1.8.14 (and related 1.8.x lineage); a crafted DNS response with a compressed pointer can cause infinite recursion or long pointer chains, leading to stack exhaustion and denial of service. The issue originates in dns.c when validating DNS responses. R...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2018/12/12 5:00 p.m.•50 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.3AI score0.06593EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2018/12/12 5:00 p.m.•103 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0
Mend
Mend
•added 2018/12/12 5:00 p.m.•2 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

8.7CVSS0.06593EPSS
SaveExploits0References9
osv-ubuntu
osv-ubuntu
•added 2018/12/12 12:00 a.m.•12 views

UBUNTU-CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/12/12 12:00 a.m.•50 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/12 12:00 a.m.•4 views

CVE-2018-20103: Loop with Unreachable Exit Condition

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.5AI score0.06593EPSS
SaveExploits0References2
osv-alpine
osv-alpine
•added 2018/11/28 2:29 p.m.•9 views

ALPINE-CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

6.5CVSS6.8AI score0.05192EPSS
SaveExploits1References1
Mend
Mend
•added 2018/11/28 2:00 p.m.•4 views

CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

7.1CVSS0.05192EPSS
SaveExploits1References11
CVE
CVE
•added 2018/11/28 2:00 p.m.•366 views

CVE-2018-14629

CVE-2018-14629 : Samba’s LDAP server is affected by a DoS due to an infinite query recursion caused by CNAME loops. Affected versions are Samba before 4.7.12, 4.8.7, and 4.9.3. An unprivileged local attacker can create a CNAME entry that triggers recursion, leading to service denial. Connected ad...

6.5CVSS6.8AI score0.05192EPSS
SaveExploits1References9Affected Software1
Debian CVE
Debian CVE
•added 2018/11/28 2:00 p.m.•66 views

CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

6.5CVSS6.8AI score0.05192EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2018/11/28 12:00 a.m.•53 views

FreeBSD : samba -- multiple vulnerabilities (54976998-f248-11e8-81e2-005056a311d1)

The samba project reports : All versions of Samba from 4.0.0 onwards are vulnerable to infinite query recursion caused by CNAME loops. Any dns record can be added via ldap by an unprivileged user using the ldbadd tool, so this is a security issue. When configured to accept smart-card...

7.5CVSS6.2AI score0.05192EPSS
SaveExploits1References13
osv-ubuntu
osv-ubuntu
•added 2018/11/27 12:00 a.m.•16 views

UBUNTU-CVE-2018-14629

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service...

6.5CVSS6.8AI score0.05192EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2018/11/26 12:00 a.m.•66 views

Debian: Security Advisory (DSA-4345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.05192EPSS
SaveExploits1References7
OSV
OSV
•added 2018/11/22 10:26 p.m.•15 views

MGASA-2018-0465 Updated poppler packages fix security vulnerabilities

In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. CVE-2018-16646 An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becau...

6.5CVSS6.7AI score0.02882EPSS
SaveExploits4References2
Rows per page
Query Builder