Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:28 p.m.4 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS6.9AI score0.00741EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.6 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

5.3CVSS7.1AI score0.00339EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-45266

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00741EPSS
Exploits0References1
NVD
NVD
added 2024/07/22 7:15 p.m.27 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

5.3CVSS0.00339EPSS
Exploits0References1
OSV
OSV
added 2024/07/22 7:15 p.m.21 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

5.3CVSS7AI score
Exploits0References1
Cvelist
Cvelist
added 2024/07/22 12:0 a.m.25 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

0.00339EPSS
Exploits0References1
CVE
CVE
added 2024/07/22 12:0 a.m.52 views

CVE-2024-41880

CVE-2024-41880 affects veilid-core in Veilid prior to version 0.3.4. The issue arises from the protocol’s ping function , which can be misused to degrade the effectiveness of safety and private routes. The publicly documented remediation is to update to Veilid 0.3.4 or later . A temporary mitigat...

5.3CVSS7.1AI score0.00339EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/22 12:0 a.m.11 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

7.1AI score0.00339EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/22 12:0 a.m.5 views

PT-2024-29611 · Veilid · Veilid

Name of the Vulnerable Software and Affected Versions: Veilid versions prior to 0.3.4 Description: The protocol's ping function in Veilid can be misused, decreasing the effectiveness of safety and private routes. Recommendations: For versions prior to 0.3.4, update to version 0.3.4 or later to...

5.3CVSS7.4AI score0.00339EPSS
Exploits0References5
NVD
NVD
added 2023/08/20 1:15 a.m.8 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS7.4AI score0.00741EPSS
Exploits0References1
OSV
OSV
added 2023/08/20 1:15 a.m.21 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS7.1AI score
Exploits0References1
Prion
Prion
added 2023/08/20 1:15 a.m.84 views

Code injection

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

5CVSS7.4AI score0.00741EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/20 12:0 a.m.9 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.1AI score0.00741EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/20 12:0 a.m.2 views

Veilid 缓冲区错误漏洞

Veilid is Veilid open source a peer-to-peer network that makes it easy to share all kinds of data. A security vulnerability exists in Veilid versions prior to 0.1.9, which stems from a memory leak vulnerability due to failure to check the size of compressed data during the decompression process. ...

7.5CVSS7.3AI score0.00741EPSS
Exploits0References2
CVE
CVE
added 2023/08/20 12:0 a.m.69 views

CVE-2023-40711

The CVE-2023-40711 issue affects Veilid prior to 0.1.9, where the uncompressed data size is not validated during decompression of an envelope receipt. This can cause a denial of service (out-of-memory abort) via crafted packet data; exploitation has been observed in the wild (Aug 2023). Affected ...

7.5CVSS7.3AI score0.00741EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/20 12:0 a.m.16 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5AI score0.00741EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/20 12:0 a.m.3 views

PT-2023-27609 · Veilid · Veilid

Name of the Vulnerable Software and Affected Versions: Veilid versions prior to 0.1.9 Description: The issue allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data. This is due to the lack of size checking for uncompressed data during decompression upon a...

7.5CVSS7.5AI score0.00741EPSS
Exploits0References4
VulnCheck KEV
VulnCheck KEV
added 2023/08/19 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS7.2AI score0.00741EPSS
Exploits0References1
Rows per page
Query Builder