Lucene search
+L

2321 matches found

Prion
Prion
added 2018/04/10 6:29 p.m.21 views

Design/Logic Flaw

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service stack exhaustion, related to the QPDFObjectHandle and QPDFDictionary classes, because nesting in direct objects is not restricted...

6.8CVSS7.3AI score0.01717EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
added 2018/04/10 6:0 p.m.33 views

CVE-2018-9918

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service stack exhaustion, related to the QPDFObjectHandle and QPDFDictionary classes, because nesting in direct objects is not restricted...

7.3AI score0.01717EPSS
SaveExploits1References3
CVE
CVE
added 2018/04/10 6:0 p.m.79 views

CVE-2018-9918

CVE-2018-9918 affects libqpdf.a in QPDF up to version 8.0.2, where nesting in direct objects is not properly restricted. This mishandling of certain "expected dictionary key but found non-name object" cases can allow remote attackers to cause a denial of service via stack exhaustion. Connected ad...

7.8CVSS7.2AI score0.01717EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2018/04/10 6:0 p.m.66 views

CVE-2018-9918

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service stack exhaustion, related to the QPDFObjectHandle and QPDFDictionary classes, because nesting in direct objects is not restricted...

7.8CVSS7.4AI score0.01717EPSS
SaveExploits1
OSV
OSV
added 2018/04/10 12:0 a.m.6 views

UBUNTU-CVE-2018-9918

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service stack exhaustion, related to the QPDFObjectHandle and QPDFDictionary classes, because nesting in direct objects is not restricted...

7.8CVSS7.1AI score0.01717EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/04/03 12:0 a.m.4 views

GNU Binutils Denial of Service Vulnerability (CNVD-2018-08466)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in the...

5.5CVSS6.7AI score0.01073EPSS
SaveExploits0References1
ArchLinux
ArchLinux
added 2018/04/01 12:0 a.m.42 views

[ASA-201804-2] openssl: multiple issues

Arch Linux Security Advisory ASA-201804-2 ========================================= Severity: Medium Date : 2018-04-01 CVE-ID : CVE-2017-3738 CVE-2018-0739 Package : openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-540 Summary ======= The package openssl befor...

6.5CVSS1.5AI score0.19295EPSS
SaveExploits0References8
Prion
Prion
added 2018/03/30 8:29 a.m.19 views

Privilege escalation

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

4.3CVSS6.7AI score0.01073EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/03/30 8:29 a.m.20 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS6AI score0.01073EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2018/03/30 8:29 a.m.3 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS5.5AI score0.01073EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2018/03/30 8:29 a.m.24 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS6.8AI score0.01073EPSS
SaveExploits0References4
OSV
OSV
added 2018/03/30 8:29 a.m.3 views

DEBIAN-CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS8.5AI score0.01073EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/30 8:29 a.m.22 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS7.1AI score
SaveExploits0References3
OSV
OSV
added 2018/03/30 8:29 a.m.5 views

UBUNTU-CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS6.8AI score0.01073EPSS
SaveExploits0References5
CVE
CVE
added 2018/03/30 8:0 a.m.98 views

CVE-2018-9138

CVE-2018-9138 affects GNU Binutils’ libiberty code, specifically cplus-dem.c, with stack exhaustion caused by recursive C++ demangling frames (demangle_nested_args, demangle_args, do_arg, do_type) in GNU Binutils 2.29 and 2.30. Connected documents reference this issue and indicate a fix has been ...

5.5CVSS6.1AI score0.01073EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/03/30 8:0 a.m.34 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

6.1AI score0.01073EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/03/30 8:0 a.m.55 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS7.1AI score0.01073EPSS
SaveExploits0
OSV
OSV
added 2018/03/27 12:0 a.m.4 views

UBUNTU-CVE-2018-0739

Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so...

6.5CVSS6.7AI score0.19295EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2018/03/06 12:0 a.m.26 views

Adobe Acrobat Reader 2017 Multiple Vulnerabilities (APSB17-36) - Windows

Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.9AI score0.1692EPSS
SaveExploits0References15
RedhatCVE
RedhatCVE
added 2018/02/14 2:20 p.m.30 views

CVE-2017-18183

An unbounded recursion flaw leading to stack exhaustion was found in the way QPDF parsed PDF files. An attacker could potentially use this flaw to crash QPDF by tricking it into processing crafted QPDF files...

5.5CVSS3.9AI score0.01178EPSS
SaveExploits0References2
Rows per page
Query Builder