Lucene search
K

1134 matches found

Tenable Nessus
Tenable Nessus
added 2021/01/20 12:0 a.m.38 views

EulerOS 2.0 SP3 : curl (EulerOS-SA-2021-1063)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.CVE-2020-8285...

7.5CVSS6.8AI score0.09917EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/01/19 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for dovecot (EulerOS-SA-2021-1064)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.05215EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/01/08 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1022)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.09917EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.34 views

EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1022)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...

7.5CVSS6.8AI score0.09917EPSS
Exploits2References3
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.4 views

The vulnerability of the Dovecot mail server, caused by uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the Dovecot mail server arises due to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures through a specially crafted email message...

7.8CVSS6.8AI score0.05215EPSS
Exploits2References8Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/15 7:3 a.m.44 views

Security Bulletin: Open Source Security issues for NPS console.

Summary Fixed Open Source issues for listed CVEs for NPS console. Vulnerability Details CVEID: CVE-2018-19838 DESCRIPTION: LibSass is vulnerable to a denial of service, caused by a stack-based buffer overflow in the IMPLEMENTASTOPERATORS expansion in ast.cpp. By persuading a victim to open a...

9.8CVSS1AI score0.05213EPSS
Exploits13Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/12/15 12:0 a.m.32 views

EulerOS 2.0 SP5 : libproxy (EulerOS-SA-2020-2550)

According to the version of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed o...

7.5CVSS7.4AI score0.04284EPSS
Exploits1References2
Prion
Prion
added 2020/12/14 8:15 p.m.25 views

Stack overflow

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing...

5CVSS7.6AI score0.09917EPSS
Exploits1References20Affected Software16
Vulnrichment
Vulnrichment
added 2020/12/14 7:39 p.m.3 views

CVE-2020-8285

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing...

6.8AI score0.09917EPSS
Exploits1References20
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.2 views

The vulnerability of the smb_fdata() function in the tcpdump utility for intercepting and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the smbfdata function smbutil.c in the tool for capturing and analyzing network traffic, tcpdump, is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.3AI score0.04122EPSS
Exploits0References15Affected Software6
RedHat Linux
RedHat Linux
added 2020/11/04 1:47 a.m.5 views

tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c

An uncontrolled resource consumption flaw was discovered in the way tcpdump prints BGP packets. The BGP protocol allows ATTRSET to be nested as many times as the message can accommodate, however when a specially crafted packet is crafted and parsed by tcpdump, this may lead to stack exhaustion du...

7.5CVSS6.3AI score0.04122EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.2 views

The vulnerability of the XACK DNS server, caused by uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the XACK DNS server stems from an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

8.6CVSS7.2AI score0.01639EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:0 a.m.5 views

The vulnerability of the glibc library lies in its uncontrolled recursion during the search for matches using a regular expression, which allows an attacker to cause a service failure.

The vulnerability of the glibc library is related to uncontrolled recursion during the search for matches using a regular expression. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

7.8CVSS7.2AI score0.05804EPSS
Exploits1References8Affected Software1
NVD
NVD
added 2020/09/09 9:15 p.m.21 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS0.04284EPSS
Exploits1References9
OSV
OSV
added 2020/09/09 9:15 p.m.19 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.4AI score
Exploits0References9
AlpineLinux
AlpineLinux
added 2020/09/09 8:30 p.m.41 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.5AI score0.04284EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 12:0 a.m.3 views

In the GNU C Library (aka glibc or libc6) through 2.29 check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

...

7.5CVSS7.7AI score0.05804EPSS
Exploits1
OSV
OSV
added 2020/08/12 4:15 p.m.1 views

DEBIAN-CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS7AI score0.05215EPSS
Exploits2References1
OSV
OSV
added 2020/08/12 4:15 p.m.29 views

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS5.3AI score
Exploits0References12
RedhatCVE
RedhatCVE
added 2020/06/29 5:20 p.m.32 views

CVE-2019-18797

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

6.5CVSS3AI score0.01512EPSS
Exploits1References3
Rows per page
Query Builder