Lucene search
+L

4876 matches found

OSV
OSV
•added 2024/09/03 1:15 p.m.•22 views

AZL-48585 CVE-2024-6232 affecting package python3 for versions less than 3.9.19-5

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS6.8AI score0.02203EPSS
SaveExploits2References1
OSV
OSV
•added 2024/09/03 1:15 p.m.•8 views

DEBIAN-CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS6.7AI score0.02203EPSS
SaveExploits2References1
NVD
NVD
•added 2024/09/03 1:15 p.m.•45 views

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS0.02203EPSS
SaveExploits2References13
OSV
OSV
•added 2024/09/03 1:15 p.m.•23 views

UBUNTU-CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS6.8AI score0.02203EPSS
SaveExploits2References8
Mend
Mend
•added 2024/09/03 12:29 p.m.•1 views

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

8.7CVSS0.02203EPSS
SaveExploits2References18
Cvelist
Cvelist
•added 2024/09/03 12:29 p.m.•76 views

CVE-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

0.02203EPSS
SaveExploits2References10
Vulnrichment
Vulnrichment
•added 2024/09/03 12:29 p.m.•37 views

CVE-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

6.8AI score0.02203EPSS
SaveExploits2References10
OSV
OSV
•added 2024/09/03 12:29 p.m.•19 views

PSF-2024-11

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS7AI score0.02203EPSS
SaveExploits2References10
Debian CVE
Debian CVE
•added 2024/09/03 12:29 p.m.•29 views

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS6.7AI score0.02203EPSS
SaveExploits2
CVE
CVE
•added 2024/09/03 12:29 p.m.•743 views

CVE-2024-6232

CVE-2024-6232 affects CPython: tarfile.TarFile header parsing RegEx backtracking causes a ReDoS, with a base score of 7.5 (HIGH). Attack vector is NETWORK and requires no privileges or user interaction. Impact is listed as Availability impact being HIGH; Confidentiality/Integrity are NONE. The is...

7.5CVSS7.8AI score0.02203EPSS
SaveExploits2References13Affected Software1
AlpineLinux
AlpineLinux
•added 2024/09/03 12:29 p.m.•46 views

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS8AI score0.02203EPSS
SaveExploits2
Veracode
Veracode
•added 2024/09/03 6:40 a.m.•19 views

Regular Expression Denial Of Service (ReDoS)

urlregex is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to inefficient handling of regular expressions in the index.js file of the Backtracking component in nescalante urlregex, allowing an attacker to induce performance degradation or resource exhaustion...

7.5CVSS6.6AI score0.00802EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2024/09/03 12:00 a.m.•16 views

PT-2024-7545

Name of the Vulnerable Software and Affected Versions CPython affected versions not specified Description The issue is related to regular expressions used in tarfile.TarFile header parsing, which can cause excessive backtracking and are vulnerable to ReDoS via specifically-crafted tar archives...

7.8CVSS6.8AI score0.02203EPSS
SaveExploits2References412
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/03 12:00 a.m.•3 views

CVE-2024-6232: Inefficient Regular Expression Complexity

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

7.5CVSS7.2AI score0.02203EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/09/02 4:00 p.m.•15 views

CVE-2020-36830 nescalante urlregex Backtracking index.js redos

A vulnerability was found in nescalante urlregex up to 0.5.0 and classified as problematic. This issue affects some unknown processing of the file index.js of the component Backtracking. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. The...

5.3CVSS7AI score0.00802EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/02 4:00 p.m.•50 views

CVE-2020-36830 nescalante urlregex Backtracking index.js redos

A vulnerability was found in nescalante urlregex up to 0.5.0 and classified as problematic. This issue affects some unknown processing of the file index.js of the component Backtracking. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. The...

5.3CVSS0.00802EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/02 2:00 p.m.•27 views

CVE-2023-7279 Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redos

A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targetsschema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular...

2.6CVSS7AI score0.00537EPSS
SaveExploits0References5
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•254 views

Metasploit HTTP(S) handler Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Metasploit HTTPS handler DoS', 'Description' = %q This module exploits the Metasploit HTTPS handler by sending a specially crafted HTTP request...

7.5CVSS7.1AI score0.41688EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•205 views

marked npm module heading ReDenial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'marked npm module "heading" ReDoS', 'Description' = %q This module exploits a Regular Expression Denial of Service vulnerability in the npm modul...

7AI score
SaveExploits2
OSV
OSV
•added 2024/08/10 7:28 a.m.•31 views

BIT-GITLAB-2024-2800 Uncontrolled Resource Consumption in GitLab

ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of service via Regex backtracking...

7.5CVSS6.5AI score0.00699EPSS
SaveExploits0References3
Rows per page
Query Builder