Denial Of Service (DoS)

elfutils is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop in the handlesymtab function of readelf.c, allowing an attacker to cause an application crash via a maliciously crafted file...

Denial Of Service (DoS)

github.com/envoyproxy/envoy is vulnerable to Denial of Service DoS attacks. When the listener is exhausted, gRPC access logs utilizing its global scope may result in a use-after-free, which allows an authenticated attacker to cause an application crash via a malicious LDS upstream...

Denial Of Service (DoS)

paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the TraceInferMeta function of unary.cc, which allows an attacker to gain sensitive information and crash the application...

Denial Of Service (DoS)

paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability exists due to the null pointer dereference in the PyObjectCheckLongOrToLong function of opfunctioncommon.cc, which allows an attacker to cause an application crash...

Use After Free

paddlepaddle is vulnerable to Use After Free. The vulnerability exists due to the lack of range checks in the axis1 parameter in the DiagonalInferMeta function of unary.cc, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial Of Service DoS. The vulnerability exists in BMPs which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libvirt.so is vulnerable to Denial of Service. The vulnerability exists in virStoragePoolObjListSearch of virstorageobj.c because it tries to lock the same item from another thread, which causes an application crash...

EulerOS Virtualization 3.0.6.6 : python-lxml (EulerOS-SA-2023-2401)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is...

CVE-2023-3745 Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a...

Denial Of Service (DoS)

pocketmine/pocketmine-mp is vulnerable to Denial of Service DoS. The vulnerability is due to a lack of validation in the BlockActorDataPacket, which causes the server to spend a significant amount of time processing a packet, leading to an application crash...

Segmentation Violation

ChakraCore is vulnerable to segmentation violation. The vulnerability is due to the Js::EntryPointInfo::HasInlinees function which results in an application crash in specific situations...

Stack Overflow

ChakraCore is vulnerable to stack buffer overflow. The vulnerability is due to the Collator object, which can result in a stack overflow during string comparisons resulting in an application crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. A malicious authenticated attacker is able to add a large number of tags to a runner in GitLab to cause extreme resorce consumption, resulting in an application crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lack of length validation of the library, which allows an attacker to create large issue descriptions via GraphQL, leading to an application crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. The vulnerability exists in the Prometheus server bundled, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

libasn1c.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the NULL pointer dereference in the defaulterrorlogger function of asn1fix.c, which allows an attacker to cause an application crash...

Out Of Bounds Write

libsndfile.so is vulnerable to Out of Bounds Write. The vulnerability exists due to the headerseek function in common.c, which allows an attacker to inject and execute malicious code, or more likely an application crash...

Denial Of Service (DoS)

github.com/pcre2project/pcre2 is vulnerable to Denial Of Service DoS. A malicious user is able to cause an integer overflow via triggering an infinite loop through a negative input, causing the application to crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial of Service DoS attacks. The regex used for package names is written in a way that makes execution time have quadratic growth based on the length of the malicious input string, resulting in an application crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. An attacker can trigger high CPU usage via a special crafted input added in the Commit message field, leading to an application crash...