Lucene search
+L

553 matches found

osv_cve
osv_cve
•added 2021/10/19 3:15 p.m.•48 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS6.7AI score
SaveExploits0References13
osv_debian
osv_debian
•added 2021/10/19 3:15 p.m.•18 views

DEBIAN-CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS6.8AI score0.06565EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/19 3:15 p.m.•49 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS0.06565EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2021/10/19 3:15 p.m.•67 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS6.9AI score0.06565EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2021/10/19 3:15 p.m.•25 views

UBUNTU-CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS6.9AI score0.06565EPSS
SaveExploits0References4
Prion
Prion
•added 2021/10/19 3:15 p.m.•51 views

Memory corruption

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

5CVSS8.3AI score0.06565EPSS
SaveExploits0References13Affected Software11
Cvelist
Cvelist
•added 2021/10/19 12:00 a.m.•46 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

8.5AI score0.06565EPSS
SaveExploits0References13
Debian CVE
Debian CVE
•added 2021/10/19 12:00 a.m.•55 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS7.1AI score0.06565EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/19 12:00 a.m.•4 views

CVE-2021-37137: Uncontrolled Resource Consumption

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

7.5CVSS6.1AI score0.06565EPSS
SaveExploits0References16
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•13 views

Netty resource management error vulnerability

Netty is a non-blocking I/O client-server framework from the Netty community that is primarily used to develop Java web applications such as protocol servers and clients. Netty suffers from a Resource Management Error vulnerability that stems from the Snappy frame decoder function not limiting th...

7.5CVSS6.9AI score0.06565EPSS
SaveExploits0References51
CVE
CVE
•added 2021/10/19 12:00 a.m.•474 views

CVE-2021-37137

CVE-2021-37137 involves Netty’s Snappy frame decoding where the SnappyFrameDecoder does not restrict the chunk length, enabling potential excessive memory usage. The issue can be triggered by crafted input that decompresses to a very large size (via network streams or files) or by sending a very ...

7.5CVSS7.4AI score0.06565EPSS
SaveExploits0References13Affected Software1
Mend
Mend
•added 2021/10/19 12:00 a.m.•4 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

8.7CVSS0.06565EPSS
SaveExploits0References26
Vulnrichment
Vulnrichment
•added 2021/10/19 12:00 a.m.•5 views

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

0.06565EPSS
SaveExploits0References13
Veracode
Veracode
•added 2021/09/10 6:32 a.m.•58 views

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Snappy frame decoder function, leading to an OOME...

7.5CVSS2.9AI score0.05908EPSS
SaveExploits0References20Affected Software28
Positive Technologies
Positive Technologies
•added 2021/09/09 12:00 a.m.•21 views

PT-2021-7976

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.67.Final Description The Snappy frame decoder function does not restrict the chunk length, which may lead to excessive memory usage. Additionally, it may buffer reserved skippable chunks until the whole chunk is...

7.8CVSS6.9AI score0.06565EPSS
SaveExploits0References367
OSS-Fuzz
OSS-Fuzz
•added 2021/05/29 11:48 p.m.•8 views

go-snappy:fuzz_decode: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5953575388839936 Project: go-snappy Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasango-snappy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcrea...

5.8AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/05/01 3:37 p.m.•13 views

go-snappy:fuzz_decode: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6309230735917056 Project: go-snappy Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasango-snappy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcrea...

5.8AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/18 6:19 p.m.•15 views

go-snappy:fuzz_roundtrip: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4749622519136256 Project: go-snappy Fuzzing Engine: libFuzzer Fuzz Target: fuzzroundtrip Job Type: libfuzzerasango-snappy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

5.8AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/02/21 5:24 p.m.•12 views

ffmpeg:ffmpeg_AV_CODEC_ID_HAP_fuzzer: Heap-buffer-overflow in bytestream2_get_levarint

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5978894031257600 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDHAPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000000228...

5.9AI score
SaveExploits0
Fedora
Fedora
•added 2021/02/18 1:24 a.m.•101 views

[SECURITY] Fedora 33 Update: snapd-2.49-1.fc33

Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...

2.9AI score0.00256EPSS
SaveExploits1
Rows per page
Query Builder