Lucene search
+L

10045 matches found

UbuntuCve
UbuntuCve
•added 2019/07/19 4:15 p.m.•25 views

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

7.5CVSS6.7AI score0.02791EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2019/07/19 4:13 p.m.•93 views

Regular Expression Denial of Service (ReDoS) in lodash

lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS5.3AI score0.03162EPSS
SaveExploits1References9Affected Software4
Cvelist
Cvelist
•added 2019/07/19 3:45 p.m.•48 views

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

7.4AI score0.02791EPSS
SaveExploits1References6
CVE
CVE
•added 2019/07/19 3:45 p.m.•183 views

CVE-2019-1010142

The CVE-2019-1010142 vulnerability affects scapy 2.4.0, enabling a Denial of Service via the _RADIUSAttrPacketListField component, with an infinite loop/resource consumption and potential unresponsiveness. Attack vectors include network traffic or a pcap. Associated advisories (Fedora/Mageia) con...

7.5CVSS7.3AI score0.02791EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2019/07/19 3:45 p.m.•94 views

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

7.5CVSS5.8AI score0.02791EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2019/07/19 12:00 a.m.•3 views

PT-2019-20138

Name of the Vulnerable Software and Affected Versions scapy version 2.4.0 Description The issue is related to a Denial of Service, which can cause an infinite loop, resource consumption, and make the program unresponsive. The component affected is the RADIUSAttrPacketListField.getfieldself...

5.7AI score
SaveExploits0References7
OSV
OSV
•added 2019/07/17 9:15 p.m.•35 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.4AI score
SaveExploits0References4
NVD
NVD
•added 2019/07/17 9:15 p.m.•28 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS7.5AI score0.03162EPSS
SaveExploits1References4
Prion
Prion
•added 2019/07/17 9:15 p.m.•37 views

Denial of service

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

4CVSS7.5AI score0.03162EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2019/07/17 9:15 p.m.•37 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.8AI score0.03162EPSS
SaveExploits1References3
OSV
OSV
•added 2019/07/17 9:15 p.m.•13 views

UBUNTU-CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.7AI score0.03162EPSS
SaveExploits1References4
CVE
CVE
•added 2019/07/17 8:25 p.m.•195 views

CVE-2019-1010266

CVE-2019-1010266 is a lodash vulnerability affecting versions before 4.17.11, caused by Uncontrolled Resource Consumption (ReDoS) in the Date handling code. The attack relies on the library matching very long strings with a regular expression, leading to a Denial of Service. The fix is to upgrade...

6.5CVSS6.4AI score0.03162EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2019/07/17 8:25 p.m.•3 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

7.1CVSS0.03162EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2019/07/17 8:25 p.m.•38 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6AI score0.03162EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/17 12:00 a.m.•6 views

CVE-2019-1010266: Uncontrolled Resource Consumption

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS7.2AI score0.03162EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/07/17 12:00 a.m.•2 views

PT-2019-11537

Name of the Vulnerable Software and Affected Versions: lodash versions prior to 4.17.11 Description: The issue is related to uncontrolled resource consumption, which can lead to a denial of service. It affects the date handler component. An attacker can exploit this by providing very long strings...

6.5CVSS0.03162EPSS
SaveExploits1References18
Tenable Nessus
Tenable Nessus
•added 2019/07/17 12:00 a.m.•44 views

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (SACK Panic) (SACK Slowness)

Based on the RPM metadata this appears to be a security kernel. The RPM changelog shows fixes related to Security Fixes : - An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment SACK segments. While processing SACK segments, t...

7.8CVSS6.9AI score0.98745EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
•added 2019/07/15 12:00 a.m.•4 views

PT-2019-11437

Name of the Vulnerable Software and Affected Versions: libnmap versions prior to 0.6.3 Description: The issue is related to an XML injection vulnerability, similar to a Billion-Laughs style attack. This vulnerability can lead to a denial of service DoS by consuming resources. The component affect...

7.5CVSS0.01524EPSS
SaveExploits1References14
BDU FSTEC
BDU FSTEC
•added 2019/07/11 12:00 a.m.•19 views

The vulnerability of the Red Hat Enterprise Linux operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the Red Hat Enterprise Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.8CVSS5.5AI score0.01369EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2019/07/10 12:00 a.m.•2 views

PT-2019-2800

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D85 Junos OS versions prior to 15.1X49-D181 Junos OS versions prior to 15.1X49-D190 Junos OS 17.3 versions Junos OS versions prior to 17.4R1-S8 Junos OS versions prior to 17.4R2-S5 Junos OS versions prior to...

7.8CVSS0.01841EPSS
SaveExploits0References7
Rows per page
Query Builder