1064 matches found
USN-4517-1: Email-Address-List vulnerability
It was discovered that Email-Address-List does not properly parse email addresses during email-ingestion. A remote attacker could use this issue to cause an algorithmic complexity attack, resulting in a denial of service. CVE-2018-18898...
Cisco AsyncOS TLS DoS
The vulnerability of the TLS Transport Layer Security implementation in Cisco AsyncOS software for Cisco Email Security Appliances is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2020-5238
The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...
Python -- multiple vulnerabilities
Python reports: gh-95778: Converting between int and str in bases other than 2 binary, 4, 8 octal, 16 hexadecimal, or 32 such as base 10 decimal now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic...
CVE-2019-13011
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...
Code injection
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...
CVE-2019-13011
CVE-2019-13011 affects GitLab Enterprise Edition 8.11.0 through 12.0.2. An attacker with access to a project (but not its repository) could brute-force enumerate a list of merge request template names, due to excessive algorithmic complexity in the relevant function. The vulnerability has a netwo...
CVE-2019-13011
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...
CVE-2019-13011
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...
CVE-2019-13011
Removed by vendor...
PT-2020-9365
Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition versions 8.11.0 through 12.0.2 Description: An issue was discovered that allows a user with access to a project, but not its repository, to create a list of merge requests template names using brute-force. The issue...
CVE-2019-13011: Uncontrolled Resource Consumption
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-1428)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-6125
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...
CVE-2012-6125
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...
DEBIAN-CVE-2012-6125
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...
CVE-2012-6125
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...
Design/Logic Flaw
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...
CVE-2012-6125
CVE-2012-6125 applies to CHICKEN Scheme prior to 4.8.0, where hash table collision handling enables algorithmic complexity attacks that cause O(n) symbol-table lookups. The consumer-facing effect is resource-heavy lookups potentially impacting availability and response under crafted input. Severa...