Lucene search
+L

12 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:55 a.m.•14 views

SUSE CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS7.7AI score0.02417EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2021/04/20 4:30 p.m.•41 views

GHSA-2XPJ-F5G2-8P7M Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9.4AI score0.02417EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2021/04/20 4:30 p.m.•94 views

Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9.2AI score0.02417EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2020/08/13 1:55 a.m.•35 views

Denial Of Service (DoS)

asyncpg is vulnerable to denial of service DoS. The vulnerability exists due to the access to an uninitialized pointer in the array data decoder through a server response...

9.8CVSS3.4AI score0.02417EPSS
SaveExploits0References3Affected Software1
osv_debian
osv_debian
•added 2020/08/12 4:15 p.m.•19 views

DEBIAN-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9AI score0.02417EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/12 4:15 p.m.•31 views

Code injection

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

7.5CVSS9.5AI score0.02417EPSS
SaveExploits0References2Affected Software2
osv_ubuntu
osv_ubuntu
•added 2020/08/12 4:15 p.m.•14 views

UBUNTU-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS7.6AI score0.02417EPSS
SaveExploits0References3
PyPA
PyPA
•added 2020/08/12 4:15 p.m.•15 views

PYSEC-2020-24

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS7.7AI score0.02417EPSS
SaveExploits0References3Affected Software1
osv_pysec
osv_pysec
•added 2020/08/12 4:15 p.m.•41 views

PYSEC-2020-24

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS4.5AI score0.02417EPSS
SaveExploits0References3
Mend
Mend
•added 2020/08/12 3:56 p.m.•10 views

CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS0.02417EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2020/08/12 3:56 p.m.•100 views

CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9AI score0.02417EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/12 12:00 a.m.•6 views

CVE-2020-17446: Access of Uninitialized Pointer

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS6.3AI score0.02417EPSS
SaveExploits0References2
Rows per page
Query Builder