Lucene search
K

1112 matches found

NVD
NVD
added 2019/01/15 9:29 p.m.12 views

CVE-2019-0001

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...

7.5CVSS7.5AI score0.00627EPSS
Exploits0References4
Cvelist
Cvelist
added 2019/01/15 9:0 p.m.16 views

CVE-2019-0001 Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...

7.5CVSS7.5AI score0.00627EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.7 views

PT-2022-21158 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to uncontrolled recursion in the GitHub repository gpac/gpac. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

9.8CVSS7.5AI score0.01461EPSS
Exploits150References373
BDU FSTEC
BDU FSTEC
added 2018/10/30 12:0 a.m.3 views

The vulnerability of the xmlStringGetNodeList function in the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the function xmlStringGetNodeList in the tree.c library from the libxml2 library is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure using a specially crafted XML file...

7.8CVSS6.6AI score0.00086EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2018/09/17 12:0 p.m.18 views

RUSTSEC-2018-0006 Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not prevent deep recursion while deserializing data structures. This allows an attacker to make a YAML file with deeply nested structures that causes an abort while deserializing it. The flaw was corrected by checking the recursion depth. Note: clap 2.33 is not...

7.5CVSS7.5AI score0.00361EPSS
Exploits0References3
OSV
OSV
added 2018/09/17 12:0 p.m.9 views

RUSTSEC-2018-0005 Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth...

7AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/01/18 7:29 a.m.24 views

CVE-2018-5772

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

5.5CVSS6.8AI score0.00427EPSS
Exploits1References1
PyPA
PyPA
added 2018/01/18 7:29 a.m.4 views

PYSEC-2018-145

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

5.5CVSS6.5AI score0.00427EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2018/01/18 7:29 a.m.2 views

PYSEC-2018-145

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

5.5CVSS6.8AI score
Exploits0References3
OSV
OSV
added 2017/12/09 6:29 a.m.2 views

CVE-2017-16419

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The issue is a stack exhaustion problem within the JavaScript API, where the computation does not...

6.5CVSS5.8AI score0.02832EPSS
Exploits0References3
OSV
OSV
added 2017/09/22 11:33 a.m.6 views

SUSE-SU-2017:2555-1 Security update for wireshark

This update for wireshark to version 2.2.9 fixes several issues. These security issues were fixed: - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation bsc1056248. - CVE-2017-13766: The Profinet I/O dissector could have crash...

7.8CVSS6.6AI score0.00889EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2017/07/12 12:19 p.m.35 views

CVE-2017-11164

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS7.3AI score0.00111EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/07/11 3:29 a.m.29 views

CVE-2017-11164

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS7.1AI score0.00111EPSS
Exploits0References2
Prion
Prion
added 2017/07/11 3:29 a.m.18 views

Code injection

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS7.3AI score0.00111EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2017/07/11 12:0 a.m.148 views

CVE-2017-11164

The CVE-2017-11164 entry affects PCRE 8.41 where OP_KETRMAX in the match function (pcre_exec.c) can cause stack exhaustion (uncontrolled recursion) when processing a crafted regular expression. The connected IBM/collection remains at high impact with IBM X-Force CVSS vector showing HIGH/Network/N...

7.8CVSS7.2AI score0.00111EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2017/06/16 3:29 p.m.2 views

DEBIAN-CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

7.5CVSS6.8AI score0.00334EPSS
Exploits0References1
OSV
OSV
added 2017/06/14 8:29 p.m.0 views

UBUNTU-CVE-2017-9617

In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c in the DAAP dissector...

5.5CVSS6.8AI score0.00221EPSS
Exploits0References2
OSV
OSV
added 2017/06/06 2:29 p.m.6 views

CVE-2017-7515

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...

5.5CVSS7.5AI score
Exploits0References1
OSV
OSV
added 2017/06/06 2:29 p.m.1 views

DEBIAN-CVE-2017-7515

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...

5.5CVSS8.1AI score0.00216EPSS
Exploits1References1
Prion
Prion
added 2017/06/06 2:29 p.m.9 views

Design/Logic Flaw

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...

4.3CVSS6AI score0.00216EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder