4767 matches found
perl: Heap-based buffer read overflow in S_grok_bslash_N()
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
perl: Heap-based buffer overflow in S_handle_regex_sets()
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2018:4187-1)
This update for perl fixes the following issues : Secuirty issues fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \...
p5-Email-Address-List -- DDoS related vulnerability
Best PRactical Solutions reports: 0.06 2019-01-02 - Changes to address CVE-2018-18898 which could allow DDoS-type attacks. Thanks to Lukas Kramer for reporting the issue and Alex Vandiver for contributing fixes. - Fix pathological backtracking for unkown regex - Fix pathological backtracking in...
openSUSE Security Update : perl (openSUSE-2018-1595)
This update for perl fixes the following issues : Secuirty issues fixed : - CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. - CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. - CVE-2018-18313: Fixed heap-buffer-overflow read if regex...
Security update for perl (moderate)
This update for perl fixes the following issues: Secuirty issues fixed: - CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. - CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. - CVE-2018-18313: Fixed heap-buffer-overflow read if regex contai...
Open Redirect
symfony/symfony is vulnerable to open redirect attacks. The vulnerability exists due to the improper regex used to sanitize the request for a redirect, allowing bad redirects via backslashes, causing open redirect attacks...
DEBIAN-CVE-2018-18314
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
DEBIAN-CVE-2018-18313
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
ALPINE-CVE-2018-18313
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
ALPINE-CVE-2018-18314
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
Regular Expression Denial of Service
Overview Versions of underscore.string prior to 3.3.5 are vulnerable to Regular Expression Denial of Service ReDoS. The function unescapeHTML is vulnerable to ReDoS due to an overly-broad regex. The slowdown is approximately 2s for 50,000 characters but grows exponentially with larger inputs...
ALPINE-CVE-2018-18312
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
CVE-2018-18312
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
spring-framework: ReDoS Attack with spring-messaging
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message ...
Perl heap overflow vulnerability (CNVD-2019-09595)
Perl is a high-level, general-purpose, interpreted, dynamic programming language. A heap overflow vulnerability exists in Sregatom in 'regcomp.c' in Perl 5.26 during compilation, which can be exploited by a remote attacker to execute arbitrary code via specially crafted regular expressions...
UBUNTU-CVE-2018-18311
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...
Arjun v1.1 - HTTP Parameter Discovery Suite
Features Multi-threading 3 modes of detection Regex powered heuristic scanning Huge list of 3370 parameter names Usage Note: Arjun doesn't work with python Note: Arjun uses nano as the default editor for the prompt bu...
CVE-2018-18385
Asciidoctor in versions 1.5.8 allows remote attackers to cause a denial of service infinite loop. The loop was caused by the fact that Parser.nextblock was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular expression that detect...
