Lucene search
+L

9768 matches found

osv_cve
osv_cve
•added 2022/03/22 4:49 p.m.•38 views

CVE-2022-25484

tcpprep v4.4.1 has a reachable assertion assertl2len 0 in packet2tree at tree.c in tcpprep v4.4.1...

7.1AI score
SaveExploits0References3
Mend
Mend
•added 2022/03/22 4:49 p.m.•8 views

CVE-2022-25484

tcpprep v4.4.1 has a reachable assertion assertl2len 0 in packet2tree at tree.c in tcpprep v4.4.1...

6.8CVSS0.00607EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2022/03/22 4:49 p.m.•167 views

CVE-2022-25484

tcpprep v4.4.1 has a reachable assertion assertl2len 0 in packet2tree at tree.c in tcpprep v4.4.1...

5.5CVSS6.5AI score0.00607EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/22 12:00 a.m.•5 views

CVE-2022-25484: Reachable Assertion

tcpprep v4.4.1 has a reachable assertion assertl2len 0 in packet2tree at tree.c in tcpprep v4.4.1...

5.5CVSS6.7AI score0.00607EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/22 12:00 a.m.•21 views

PT-2022-17319 · Tcpprep +2 · Tcpprep +2

Name of the Vulnerable Software and Affected Versions: tcpprep version 4.4.1 Description: The issue is related to a reachable assertion in the packet2tree function at tree.c in tcpprep. This assertion is assertl2len 0, indicating a potential problem when the l2len variable is not greater than 0...

7.8CVSS6.5AI score0.02006EPSS
SaveExploits12References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/22 12:00 a.m.•7 views

CVE-2022-0667: Reachable Assertion

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

7.5CVSS7.2AI score0.01348EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/03/21 12:00 a.m.•52 views

ISC BIND 9.18.0 < 9.18.1 Assertion Failure (CVE-2022-0667)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0667 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

7.5CVSS7.5AI score0.01348EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/18 6:15 a.m.•12 views

CVE-2022-27240

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

9.8CVSS6.1AI score0.01557EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2022/03/18 6:15 a.m.•37 views

UBUNTU-CVE-2022-27240

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

9.8CVSS7.6AI score0.01557EPSS
SaveExploits0References4
Prion
Prion
•added 2022/03/18 6:15 a.m.•27 views

Buffer overflow

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

7.5CVSS9.7AI score0.01557EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2022/03/18 5:55 a.m.•29 views

CVE-2022-27240

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

7.4AI score
SaveExploits0References4
CVE
CVE
•added 2022/03/18 5:55 a.m.•119 views

CVE-2022-27240

CVE-2022-27240 concerns Glewlwyd SSO server 2.x before 2.6.2, where a buffer overflow in the WebAuthn support (scheme/webauthn.c) is associated with a WebAuthn assertion. The Red Hat and related advisories confirm the same description. No exploit details are provided in the connected documents. T...

9.8CVSS9.7AI score0.01557EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/03/18 5:55 a.m.•13 views

CVE-2022-27240

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

9.8CVSS0.01557EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/18 12:00 a.m.•6 views

CVE-2022-27240: Buffer Copy without Checking Size of Input

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

9.8CVSS8.4AI score0.01557EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•3 views

PT-2022-18322

Name of the Vulnerable Software and Affected Versions Glewlwyd SSO server versions 2.x before 2.6.2 Description The issue is related to a buffer overflow in the scheme/webauthn.c file, associated with a webauthn assertion. Recommendations For versions prior to 2.6.2, update to version 2.6.2 or...

9.8CVSS6.1AI score0.01557EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2022/03/16 8:56 p.m.•86 views

CVE-2022-0667

An assertion check flaw was found in BIND, with a refactoration of recursive client code that introduced a "backstop lifetime timer." While BIND processes a request for a DS record that needs to be forwarded, it waits until this processing is complete or until the backstop lifetime timer has time...

7.5CVSS2.2AI score0.01348EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/03/16 8:56 p.m.•56 views

CVE-2022-0635

An assertion check flaw was found in BIND, with a refactoration of RFC 8198 Aggressive Use of the DNSSEC-Validated Cache feature synth-from-dnssec. The repeated patterns of specific queries to servers with this feature enabled could cause an INSIST failure in query.c:querydname, which results in...

7.5CVSS2.1AI score0.01348EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/03/16 11:00 a.m.•17 views

CVE-2022-0635

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check...

7.5CVSS7.2AI score0.01348EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/16 12:00 a.m.•21 views

ISC BIND security vulnerability

ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in ISC BIND that stems from the fact that when synth-from-dnssec is enabled the default setting, lookups involving a DNAME may trigger an assertion failure. The...

7.5CVSS7.3AI score0.01348EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2022/03/16 12:00 a.m.•16 views

UBUNTU-CVE-2022-0635

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check...

7.5CVSS7.2AI score0.01348EPSS
SaveExploits0References2
Rows per page
Query Builder