Lucene search
+L

12 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:55 a.m.•12 views

SUSE CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS7.7AI score0.02417EPSS
SaveExploits0References2
OSV
OSV
•added 2021/04/20 4:30 p.m.•40 views

GHSA-2XPJ-F5G2-8P7M Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9.4AI score0.02417EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2021/04/20 4:30 p.m.•90 views

Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9.2AI score0.02417EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2020/08/13 1:55 a.m.•30 views

Denial Of Service (DoS)

asyncpg is vulnerable to denial of service DoS. The vulnerability exists due to the access to an uninitialized pointer in the array data decoder through a server response...

9.8CVSS3.4AI score0.02417EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2020/08/12 4:15 p.m.•11 views

DEBIAN-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9AI score0.02417EPSS
SaveExploits0References1
PyPA
PyPA
•added 2020/08/12 4:15 p.m.•11 views

PYSEC-2020-24

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS7.7AI score0.02417EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/08/12 4:15 p.m.•28 views

Code injection

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

7.5CVSS9.5AI score0.02417EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2020/08/12 4:15 p.m.•11 views

UBUNTU-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS7.6AI score0.02417EPSS
SaveExploits0References3
OSV
OSV
•added 2020/08/12 4:15 p.m.•32 views

PYSEC-2020-24

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS4.5AI score0.02417EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2020/08/12 3:56 p.m.•98 views

CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS9AI score0.02417EPSS
SaveExploits0
Mend
Mend
•added 2020/08/12 3:56 p.m.•1 views

CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS0.02417EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/12 12:00 a.m.•4 views

CVE-2020-17446: Access of Uninitialized Pointer

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

9.8CVSS6.3AI score0.02417EPSS
SaveExploits0References2
Rows per page
Query Builder