Uncontrolled Resource Consumption in ansi-html

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2022-03630)

GPAC Project Advanced Content is an implementation of the MPEG-4 system standard, written in ANSI C. An integer overflow vulnerability exists in GPAC Project on Advanced Content, which stems from an unchecked algorithm and can be exploited by remote attackers to cause a heap buffer overflow,...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2022-03631)

GPAC Project Advanced Content is an implementation of the MPEG-4 system standard, written in ANSI C. An integer overflow vulnerability exists in GPAC Project on Advanced Content, which stems from an unchecked algorithm and can be exploited by remote attackers to cause a heap buffer overflow,...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2022-03632)

GPAC Project Advanced Content is an implementation of the MPEG-4 system standard, written in ANSI C. An integer overflow vulnerability exists in GPAC Project on Advanced Content, which stems from an unchecked algorithm and can be exploited by remote attackers to cause a heap buffer overflow,...

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

Regular Expression Denial Of Service (ReDoS)

ansi-html is vulnerable to regular expression denial of service. An attacker is able to exploit the vulnerability by injecting a malicious long string of digits into the system...

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

Input validation

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-23424 Regular Expression Denial of Service (ReDoS)

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-23424

CVE-2021-23424 affects the Node.js package ansi-html . The provided documents describe a denial-of-service condition caused by a regular-expression Denial-of-Service (ReDoS) flaw in processing input, potentially allowing an attacker to consume resources and degrade availability. Several IBM advis...

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

ApacheLogAnonymizer (>=0.1.0 <=0.1.1), Boa (>=0.4.0 <=0.11.0) +13717 more potentially affected by unknown CVE via ansi_term (>=0.10.2 <=0.9.0)

ansiterm CARGO version =0.10.2, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0139...

PT-2021-15512 · Ansi-Html · Ansi-Html

Name of the Vulnerable Software and Affected Versions: ansi-html affected versions not specified Description: The issue arises when an attacker provides a malicious string, causing the system to get stuck processing the input for an extremely long time. Recommendations: At the moment, there is no...

ansi-html安全漏洞

ansi-html is an elegant library for NPM that converts chalk ANSI text to HTML. A security vulnerability exists in ansi-html 0.0.7 and earlier versions, if an attacker exploits this vulnerability by supplying a malicious string, the program will be stuck and unable to process input for an extended...

SUSE: Security Advisory (SUSE-SU-2019:13931-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0726react (=0.1.1) +24088 more potentially affected by CVE-2021-23424 via ansi-html (>=0.0.4 <=0.0.7)

ansi-html NPM version =0.0.4, =1.0.1, =1.1.0 - 0726react =0.1.1 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 - 0xgank-tea-characteristic =1.0.0 -...

Regular Expression Denial of Service (ReDoS)

Overview ansi-html is an An elegant lib that converts the chalked ANSI text to HTML. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time. PoC...

rxvt 2.7.0 / rxvt-unicode 9.22 Code Execution Exploit

rxvt version 2.7.0 and rxvt-unicode version 9.22 incorrectly handles ANSI escape sequences allowing for arbitrary code execution. !/usr/bin/env python Title: rxvt remote code execution over scp with $SHELL=/bin/bash 0day Version: rxvt 2.7.10, rxvt-unicode 9.22 Author: def Date: 2021-05-16 CVE: N/...

rxvt 2.7.0 / rxvt-unicode 9.22 Code Execution

!/usr/bin/env python Title: rxvt remote code execution over scp with $SHELL=/bin/bash 0day Version: rxvt 2.7.10, rxvt-unicode 9.22 Author: def Date: 2021-05-16 CVE: N/A ------------------------------------------------------------------------------ URXVT VULNERABILITY In rxvt-based terminals, ANSI...