2220 matches found
CVE-2022-24921: Uncontrolled Recursion
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...
CVE-2022-23606: Uncontrolled Recursion
Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service CDS all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle...
OPENSUSE-SU-2022:0539-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-3997: Fixed an uncontrolled recursion in systemd's systemd-tmpfiles bsc1194178. The following non-security bugs were fixed: - udev/netid: don't generate slot based names if multiple devices might claim the same slot bsc1192637 -...
GHSA-P8P6-RCP6-4MRM Uncontrolled Recursion in Play Framework
In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents...
Mageia: Security Advisory (MGASA-2021-0299)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2021-0572)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-23889: Uncontrolled Recursion
The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...
CVE-2021-46509: Uncontrolled Recursion
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.
...
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
...
Security Bulletin: A vulnerability in Apache log4j (CVE-2021-45105) affects IBM Operations Analytics Predictive Insights
Summary There is a vulnerability in the Apache Log4j open source library used by IBM Operations Analytics Predictive Insights. Apache Log4j versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups which allows a Denial...
The vulnerability of the `ntfsattr_pwrite` function in the NTFS file system driver for the FUSE NTFS-3G module, related to an uncontrolled recursion, allows a hacker to cause a service failure.
The vulnerability of the ntfsattrpwrite function in the NTFS file system driver for the FUSE NTFS-3G module is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure by using a specially created NTFS image...
The vulnerability of the wireshark traffic analysis program, related to an uncontrolled recursion, allows a hacker to cause a service failure.
The vulnerability of the wireshark traffic analysis program is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
CVE-2021-46195
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...
CVE-2021-46195
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...
CVE-2021-46195
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...
Design/Logic Flaw
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...
UBUNTU-CVE-2021-46195
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...
CVE-2021-46195
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...
CVE-2021-46195
CVE-2021-46195 affects GCC v12.0, specifically the libiberty/rust-demangle.c component. The issue is an uncontrolled recursion that allows a DoS by consuming CPU and memory. The provided connected Nessus entry for MiracleLinux 9 notes a linked advisory tying GCC 12.0.1-11.2.el9 to this CVE, confi...