Lucene search
+L

770 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/13 12:00 a.m.•9 views

CVE-2020-14354: Buffer Copy without Checking Size of Input

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.3CVSS6.1AI score0.00529EPSS
SaveExploits1References4
GitLab Advisory Database
GitLab Advisory Database
•added 2021/05/13 12:00 a.m.•38 views

Use After Free

A possible use-after-free and double-free in c-ares lib if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

3.3CVSS2.6AI score0.00529EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2021/05/07 12:15 p.m.•29 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS0.00374EPSS
SaveExploits1References2
osv_alpine
osv_alpine
•added 2021/05/07 12:15 p.m.•16 views

ALPINE-CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS6.4AI score0.00374EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2021/05/07 12:15 p.m.•17 views

UBUNTU-CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS7.2AI score0.00374EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/05/07 12:15 p.m.•19 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS6.7AI score0.00374EPSS
SaveExploits1References3
Prion
Prion
•added 2021/05/07 12:15 p.m.•38 views

Design/Logic Flaw

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

2.1CVSS5.1AI score0.00374EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/05/07 11:46 a.m.•45 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5AI score0.00374EPSS
SaveExploits1References2
CVE
CVE
•added 2021/05/07 11:46 a.m.•210 views

CVE-2021-3502

CVE-2021-3502 affects Avahi (vulnerable: avahi 0.8-5). The flaw is a reachable assertion in the function avahi_s_host_name_resolver_start , which allows a local attacker to crash the avahi-daemon by issuing hostname resolutions for badly formatted hostnames via the avahi socket or D-Bus. Impact: ...

5.5CVSS5.3AI score0.00374EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/05/07 11:46 a.m.•89 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS6.9AI score0.00374EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2021/05/07 11:46 a.m.•105 views

CVE-2021-3502

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

5.5CVSS5.6AI score0.00374EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2021/05/04 8:22 p.m.•46 views

CVE-2018-25009

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS6.8AI score0.021EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2021/05/04 8:22 p.m.•55 views

CVE-2020-36331

A flaw was found in libwebp. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS6.8AI score0.02302EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/05/04 8:22 p.m.•38 views

CVE-2020-36332

A flaw was found in libwebp. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...

7.5CVSS6.8AI score0.01966EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/05/04 8:22 p.m.•37 views

CVE-2020-36330

A flaw was found in libwebp. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS6.8AI score0.0223EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/05/04 8:21 p.m.•51 views

CVE-2018-25010

A flaw was found in libwebp. An out-of-bounds read was found in function ApplyFilter. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS6.8AI score0.02235EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2021/05/04 8:21 p.m.•31 views

CVE-2018-25013

A flaw was found in libwebp. An out-of-bounds read was found in function ShiftBytes. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS6.8AI score0.02051EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2021/05/04 8:21 p.m.•64 views

CVE-2018-25012

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS6.8AI score0.02051EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2021/04/30 5:49 p.m.•50 views

CVE-2021-20095

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

4.4AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/04/28 7:49 p.m.•56 views

CVE-2019-25040

A flaw was found in unbound. An infinite loop in dnamepktcopy function could be triggered by a remote attacker. The highest threat from this vulnerability is to service availability...

7.5CVSS7.3AI score0.0207EPSS
SaveExploits0References3
Rows per page
Query Builder