Lucene search
+L

3878 matches found

UbuntuCve
UbuntuCve
added 2021/08/30 5:15 a.m.48 views

CVE-2021-38385

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...

7.5CVSS7.2AI score0.01685EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/30 5:15 a.m.11 views

UBUNTU-CVE-2021-38385

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...

7.5CVSS7.2AI score0.01685EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/08/30 12:00 a.m.38 views

CVE-2021-38385

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...

7.6AI score0.01685EPSS
SaveExploits1References4
CVE
CVE
added 2021/08/30 12:00 a.m.179 views

CVE-2021-38385

Tor vulnerable in versions before 0.3.5.16, 0.4.5.10, and 0.4.6.7 due to mishandling the relationship between batch-signature and single-signature verification, causing remote assertion failures (TROVE-2021-007). Connected advisories confirm the issue across multiple distributions and recommend u...

7.5CVSS7.2AI score0.01685EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2021/08/30 12:00 a.m.11 views

Github libjxl 安全漏洞

libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.5.0 contains an assertion failure vulnerability in lib/jxl/image.cc jxl::PlaneBase::PlaneBase. An attacker can exploit the vulnerability to cause a denial of service via a malicious GIF file...

7.5CVSS5.7AI score0.01071EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/08/30 12:00 a.m.93 views

CVE-2021-38385

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...

7.5CVSS7.7AI score0.01685EPSS
SaveExploits1
NVD
NVD
added 2021/08/25 1:15 a.m.15 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS0.01421EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/25 1:15 a.m.21 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS6.9AI score
SaveExploits0References1
Prion
Prion
added 2021/08/25 1:15 a.m.22 views

Design/Logic Flaw

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

5CVSS7.5AI score0.01421EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/08/25 1:15 a.m.29 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS7.1AI score0.01421EPSS
SaveExploits0References2
CVE
CVE
added 2021/08/25 12:21 a.m.73 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure that can be triggered remotely in a specific edge case: NSEC3 with too many iterations used for a positive wildcard proof. The vulnerability is documented across multiple sources in this CVE, confirming the affected software (Knot Resolv...

7.5CVSS7.4AI score0.01421EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/25 12:21 a.m.27 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.7AI score0.01421EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/08/25 12:21 a.m.34 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS7.5AI score0.01421EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/08/23 12:00 a.m.22 views

Debian DSA-4961-1 : tor - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4961 advisory. Henry de Valence reported a flaw in the signature verification code in Tor, a connection-based low-latency anonymous communication system. A remote attacker can take...

7.5CVSS7.8AI score0.01685EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2021/08/20 12:00 a.m.30 views

openSUSE 15 Security Update : tor (openSUSE-SU-2021:1169-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1169-1 advisory. - Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification,...

7.5CVSS7.9AI score0.01685EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/08/20 12:00 a.m.20 views

Live555 Streaming Media < 2021.08.13 Multiple Vulnerabilities - Linux

Live555 Streaming Media is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

7.5CVSS6.6AI score0.01532EPSS
SaveExploits2References1
Veracode
Veracode
added 2021/08/19 8:55 p.m.9 views

Denial-of-service (DoS)

tor is vulnerable to denial of service. This assertion failure could be triggered remotely, leading to a denial of service attack...

7.5CVSS6.4AI score0.01685EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/19 12:00 a.m.47 views

ISC BIND 9.16.19 / 9.16.19-S1 / 9.17.16 Assertion Failure (CVE-2021-25218)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-25218 advisory. - In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named...

7.5CVSS6.2AI score0.03589EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/08/19 12:00 a.m.11 views

PT-2022-4668 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5 through 10.7 Description: The issue is related to an assertion failure at table-get ref count in the dict0dict.cc component of the MariaDB database management system. This failure can be triggered by a remote attacker,...

7.8CVSS7.6AI score0.73188EPSS
SaveExploits48References360
OSV
OSV
added 2021/08/18 5:15 p.m.7 views

CVE-2021-39283

liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands...

5.5CVSS6.6AI score0.00865EPSS
SaveExploits1References2
Rows per page
Query Builder