CVE-2019-10094

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file a quine, causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later...

PT-2019-4679

Name of the Vulnerable Software and Affected Versions Apache Tika versions 1.7 through 1.21 Description A carefully crafted package or compressed file that yields the same file when unzipped or uncompressed can cause a StackOverflowError in the RecursiveParserWrapper. This issue is related to a...

CVE-2019-10094: Allocation of Resources Without Limits or Throttling

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file a quine, causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later...

GHSA-GFX6-PH4Q-Q54Q Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

openSUSE Security Update : xerces-j2 (openSUSE-2017-1179)

xerces-j2 was updated to fix several issues. This security issue was fixed : - bsc814241: Prevent possible DoS through very long attribute names This non-security issue was fixed : - Prevent StackOverflowError when applying a pattern restriction on long strings while trying to validate an XML fil...

SUSE-SU-2017:2744-1 Security update for xerces-j2

xerces-j2 was updated to fix several issues. This security issue was fixed: - bsc814241: Prevent possible DoS through very long attribute names This non-security issue was fixed: - Prevent StackOverflowError when applying a pattern restriction on long strings while trying to validate an XML file...

SUSE-SU-2017:2749-1 Security update for xerces-j2

xerces-j2 was updated to fix several issues. This security issue was fixed: - bsc814241: Prevent possible DoS through very long attribute names This non-security issue was fixed: - Prevent StackOverflowError when applying a pattern restriction on long strings while trying to validate an XML file...

PT-2017-19393

Name of the Vulnerable Software and Affected Versions xerces-j2 affected versions not specified Description The issue allows for a possible Denial of Service DoS through very long attribute names. This can occur when an XML file is validated against a schema, potentially leading to a...

PT-2017-19394

Name of the Vulnerable Software and Affected Versions xerces-j2 affected versions not specified Description The issue allows for a possible Denial of Service DoS through very long attribute names. This can occur when an XML file is being validated against a schema, potentially leading to a...

CVE-2017-1000118: Improper Restriction of Operations within the Bounds of a Memory Buffer

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

CVE-2017-1000118

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

PT-2017-10821

Name of the Vulnerable Software and Affected Versions Akka HTTP versions prior to 10.0.6 Description The issue is related to an Illegal Media Range in the Accept Header, which causes a StackOverflowError and leads to a Denial of Service. Recommendations For versions prior to 10.0.6, update to...

Oracle OpenJDK - Java Serialization DoS vulnerability

Application: Oracle OpenJDK Vendor: Oracle Bug: DoS Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 17.01.2017 Reference: Oracle CPU Jan 2017 Authors: Roman Shalymov VULNERABILITY INFORMATION Class: Denial of Service Remotely Exploitable: Yes Locally Exploitable: Yes CVS...

CVE-2010-4807

Race condition in IBM Web Content Manager WCM 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service infinite recursive query via unspecified vectors, related to a StackOverflowError exception...

PT-2011-1753

Name of the Vulnerable Software and Affected Versions IBM Web Content Manager version 7.0.0.1 Description A race condition issue exists, allowing remote authenticated users to cause a denial of service through an infinite recursive query, resulting in a StackOverflowError exception. Recommendatio...

CVE-2010-4807: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in IBM Web Content Manager WCM 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service infinite recursive query via unspecified vectors, related to a StackOverflowError exception...

Mortbay Jetty Denial Of Service

?php Mortbay Jetty = 7.0.0-pre5 Dispatcher Servlet DoS Affected Software: Jetty 6.1.16, 7.0.0.pre5 all platforms Author: Ikki http://blog.nibblesec.org/ Description: The dispatcher servlet com.acme.DispatchServlet is prone to a DoS vulnerability. This example servlet is meant to be used as a...