Lucene search
+L

8276 matches found

Cvelist
Cvelist
•added 2017/07/11 12:00 a.m.•79 views

CVE-2017-11164

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.3AI score0.03076EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/11 12:00 a.m.•5 views

CVE-2017-11164: Uncontrolled Recursion

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS5.8AI score0.03076EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/06 12:00 a.m.•7 views

CVE-2017-0692: Uncontrolled Recursion

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36725407...

5.5CVSS5.8AI score0.00343EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/06/30 12:00 a.m.•21 views

The vulnerability of the crypto/ahash.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the crypto/ahash.c component in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a remote attacker to cause a service failure the API interface calls its own callback and triggers infinit...

7.8CVSS6.8AI score0.04257EPSS
SaveExploits0References23Affected Software1
Prion
Prion
•added 2017/06/21 7:29 a.m.•29 views

Stack overflow

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

5CVSS6.9AI score0.03422EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2017/06/21 7:29 a.m.•10 views

DEBIAN-CVE-2017-9766

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

7.5CVSS6.5AI score0.03422EPSS
SaveExploits0References1
CVE
CVE
•added 2017/06/21 7:00 a.m.•177 views

CVE-2017-9766

CVE-2017-9766 : In Wireshark, version 2.2.7 is vulnerable to a denial of service caused by stack exhaustion via PROFINET IO data with excessive recursion. The issue occurs in the dissect_IODWriteReq function (plugins/profinet/packet-dcerpc-pn-io.c). Remote attackers could trigger the vulnerabilit...

7.5CVSS7.1AI score0.03422EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/21 12:00 a.m.•7 views

CVE-2017-9766: Uncontrolled Recursion

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

7.5CVSS6.8AI score0.03422EPSS
SaveExploits0References2
Apple
Apple
•added 2017/06/20 10:43 a.m.•90 views

About the security content of tvOS 10.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.8CVSS1AI score0.09283EPSS
SaveExploits100Affected Software1
OSV
OSV
•added 2017/06/19 4:29 p.m.•22 views

CVE-2017-1000378

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

9.8CVSS6.3AI score0.04123EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/06/19 12:00 a.m.•18 views

Apache Thrift Client Library Denial of Service Vulnerability

Apache Thrift is an interface definition language and binary communication protocol for defining and creating services for multiple languages. The Apache Thrift client inventory is vulnerable to a denial of service. A remote authenticated user can cause a denial of service infinite recursion via ...

6.5CVSS6.8AI score0.05335EPSS
SaveExploits0References1
Prion
Prion
•added 2017/06/16 10:29 p.m.•25 views

Design/Logic Flaw

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...

4CVSS6.6AI score0.07593EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2017/06/16 10:00 p.m.•6 views

CVE-2015-3254

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...

7.1CVSS0.05335EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2017/06/16 10:00 p.m.•57 views

CVE-2015-3254

Removed by vendor...

6.5CVSS6.9AI score0.05335EPSS
SaveExploits0
CVE
CVE
•added 2017/06/16 10:00 p.m.•97 views

CVE-2015-3254

Apache Thrift client libraries before 0.9.3 are affected by CVE-2015-3254, which could allow a remote authenticated user to trigger a denial of service via infinite recursion in the skip function. Impact is a partial denial of service (availability affected) with network access and no confidentia...

6.5CVSS6AI score0.05335EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2017/06/16 3:29 p.m.•24 views

DEBIAN-CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

7.5CVSS6.8AI score0.01079EPSS
SaveExploits0References1
NVD
NVD
•added 2017/06/16 3:29 p.m.•41 views

CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

7.5CVSS7.4AI score0.01079EPSS
SaveExploits0References1
Mend
Mend
•added 2017/06/16 3:00 p.m.•6 views

CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

8.7CVSS0.01079EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/16 12:00 a.m.•9 views

CVE-2017-9729: Uncontrolled Recursion

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

7.5CVSS7.2AI score0.01079EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/06/16 12:00 a.m.•9 views

PT-2017-19141

Name of the Vulnerable Software and Affected Versions uClibc version 0.9.33.2 Description The issue is related to stack exhaustion due to uncontrolled recursion in the check dst limits calc pos 1 function, located in misc/regex/regexec.c, when the software processes a crafted regular expression...

7.5CVSS0.01079EPSS
SaveExploits0References5
Rows per page
Query Builder