8276 matches found
PT-2017-6654
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.9.3 Description The issue allows remote authenticated users to cause a denial of service, specifically through infinite recursion, by exploiting vectors related to the skip function. Recommendations For versio...
CVE-2015-3254: Improper Input Validation
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2017-9616
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...
CVE-2017-9616
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...
UBUNTU-CVE-2017-9617
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...
CVE-2017-9616
CVE-2017-9616 affects Wireshark up to version 2.2.7, where the mp4 dissector (epan/dissectors/file-mp4.c) is vulnerable to stack exhaustion caused by overly deep MP4 box chunks triggering uncontrolled recursion. The description in the Initial Document explicitly identifies this condition and the ...
CVE-2017-9617
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...
CVE-2017-9617
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...
CVE-2017-9616
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...
CVE-2016-8746
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true...
Design/Logic Flaw
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true...
CVE-2016-8746: Untrusted Search Path
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true...
CVE-2017-9616: Uncontrolled Recursion
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion uncontrolled recursion in the dissectmp4box function in epan/dissectors/file-mp4.c...
CVE-2017-9617: Uncontrolled Recursion
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...
PT-2017-19075
Name of the Vulnerable Software and Affected Versions Wireshark version 2.2.7 Description The issue is related to overly deep mp4 chunks that may cause stack exhaustion due to uncontrolled recursion in the dissect mp4 box function. Recommendations For Wireshark version 2.2.7, consider updating to...
PT-2017-19076
Name of the Vulnerable Software and Affected Versions Wireshark version 2.2.7 Description The issue is related to deeply nested DAAP data, which may cause stack exhaustion due to uncontrolled recursion in the dissect daap one tag function in the DAAP dissector. Recommendations For Wireshark versi...
Design/Logic Flaw
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...
CVE-2017-7515
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...