Lucene search
K

630 matches found

OSV
OSV
added 2021/05/13 2:15 p.m.13 views

CVE-2020-14354

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.3CVSS7AI score
Exploits0References5
Prion
Prion
added 2021/05/13 2:15 p.m.21 views

Double free

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

2.1CVSS4.2AI score0.00529EPSS
Exploits1References5Affected Software2
UbuntuCve
UbuntuCve
added 2021/05/13 2:15 p.m.27 views

CVE-2020-14354

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.3CVSS5.9AI score0.00529EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/05/13 1:38 p.m.20 views

CVE-2020-14354

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.9AI score0.00529EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2021/05/13 1:38 p.m.27 views

CVE-2020-14354

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.3CVSS3.5AI score0.00529EPSS
Exploits1
GitLab Advisory Database
GitLab Advisory Database
added 2021/05/13 12:0 a.m.20 views

Use After Free

A possible use-after-free and double-free in c-ares lib if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.3CVSS2.6AI score0.00529EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2021/05/07 12:15 p.m.19 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS0.00374EPSS
Exploits1References2
OSV
OSV
added 2021/05/07 12:15 p.m.2 views

ALPINE-CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS6.4AI score0.00374EPSS
Exploits1References1
Prion
Prion
added 2021/05/07 12:15 p.m.30 views

Design/Logic Flaw

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

2.1CVSS5.1AI score0.00374EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2021/05/07 12:15 p.m.2 views

UBUNTU-CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS7.2AI score0.00374EPSS
Exploits1References4
Cvelist
Cvelist
added 2021/05/07 11:46 a.m.25 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5AI score0.00374EPSS
Exploits1References2
CVE
CVE
added 2021/05/07 11:46 a.m.180 views

CVE-2021-3502

CVE-2021-3502 affects Avahi (vulnerable: avahi 0.8-5). The flaw is a reachable assertion in the function avahi_s_host_name_resolver_start , which allows a local attacker to crash the avahi-daemon by issuing hostname resolutions for badly formatted hostnames via the avahi socket or D-Bus. Impact: ...

5.5CVSS5.3AI score0.00374EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/05/07 11:46 a.m.27 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS6.9AI score0.00374EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/05/07 11:46 a.m.38 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS5.6AI score0.00374EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2021/05/04 8:22 p.m.35 views

CVE-2018-25009

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS1.8AI score0.021EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2021/05/04 8:22 p.m.45 views

CVE-2020-36331

A flaw was found in libwebp. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS8.7AI score0.02302EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2021/05/04 8:22 p.m.28 views

CVE-2020-36332

A flaw was found in libwebp. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...

7.5CVSS8.2AI score0.01966EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2021/05/04 8:22 p.m.29 views

CVE-2020-36330

A flaw was found in libwebp. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS8.7AI score0.0223EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2021/05/04 8:21 p.m.38 views

CVE-2018-25010

A flaw was found in libwebp. An out-of-bounds read was found in function ApplyFilter. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS1.9AI score0.02235EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2021/05/04 8:21 p.m.24 views

CVE-2018-25013

A flaw was found in libwebp. An out-of-bounds read was found in function ShiftBytes. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS2AI score0.02051EPSS
Exploits0References2
Rows per page
Query Builder