Lucene search
K

312 matches found

CVE
CVE
added 2018/10/31 5:0 a.m.67 views

CVE-2018-18854

Lightbend Spray spray-json (up to version 1.3.4) is vulnerable to denial of service via Algorithmic Complexity when parsing many JSON object fields with colliding hash codes. Remote attacker could exhaust resources. Documents consistently describe the issue but do not provide official remediation...

7.5CVSS7.3AI score0.00838EPSS
Exploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2018/06/20 2:49 p.m.18 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS3.5AI score0.00492EPSS
Exploits0References2
OSV
OSV
added 2018/06/20 2:29 p.m.16 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.7AI score
Exploits0References3
Prion
Prion
added 2018/06/20 2:29 p.m.19 views

Input validation

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

5CVSS7.4AI score0.00492EPSS
Exploits0References3
NVD
NVD
added 2018/06/20 2:29 p.m.20 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.00492EPSS
Exploits0References3
OSV
OSV
added 2018/06/20 2:29 p.m.1 views

ALPINE-CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS6.8AI score0.00492EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/06/20 2:29 p.m.23 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7AI score0.00492EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2018/06/20 2:0 p.m.28 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.00492EPSS
Exploits0
CVE
CVE
added 2018/06/20 2:0 p.m.150 views

CVE-2018-12558

The CVE-2018-12558 issue affects the Perl Email::Address module (versions up to 1.909) and arises from an algorithmic complexity vulnerability in Address.pm that lets an attacker cause CPU-based Denial of Service with specially crafted input (notably a string containing 30 form-field characters, ...

7.5CVSS7.2AI score0.00492EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2018/06/20 2:0 p.m.35 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.00492EPSS
Exploits0
Cvelist
Cvelist
added 2018/06/20 2:0 p.m.25 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.3AI score0.00492EPSS
Exploits0References3
OSV
OSV
added 2017/07/17 1:18 p.m.15 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2017/07/17 1:18 p.m.12 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS8.6AI score0.00351EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/07/17 1:18 p.m.21 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS7.1AI score0.00351EPSS
Exploits0References3
Prion
Prion
added 2017/07/17 1:18 p.m.13 views

Input validation

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

5CVSS7.6AI score0.00635EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/07/17 12:0 a.m.2 views

CHICKEN Algorithm Complexity Vulnerability

CHICKEN Scheme is a compiler and interpreter based on the Scheme language , it can compile Scheme code into standard C code , and supports extensions . A security vulnerability exists in CHICKEN Scheme 4.12.0 and earlier versions. An attacker can exploit the vulnerability to perform an algorithmi...

7.5CVSS6.9AI score0.00351EPSS
Exploits0References1
CVE
CVE
added 2017/07/16 9:0 p.m.65 views

CVE-2017-11343

CHICKEN Scheme versions up to 4.12.0 are vulnerable to an algorithmic complexity attack due to an incomplete fix for CVE-2012-6125. The issue arises from crafted input causing O(n) symbol-table lookups. The Fedora advisory FEDORA-2017-76ce091a43 provides a fix for CVE-2017-11343 (referenced in th...

7.5CVSS7.4AI score0.00351EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/07/16 9:0 p.m.19 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5AI score0.00351EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/07/16 9:0 p.m.17 views

CVE-2017-11343

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in On lookup time...

7.5CVSS7.6AI score0.00351EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2017/07/16 12:0 a.m.11 views

PT-2017-11944 · Chicken +1 · Chicken Scheme +1

Name of the Vulnerable Software and Affected Versions: CHICKEN Scheme versions prior to 4.12.1 Description: The issue is related to an incomplete fix for a previous problem, which allows an algorithmic complexity attack. An attacker can provide crafted input that, when inserted into the symbol...

9.8CVSS7.7AI score0.03058EPSS
Exploits0References25
Rows per page
Query Builder