Lucene search
+L

29 matches found

OSV
OSV
added 2024/01/19 9:30 p.m.71 views

GHSA-HFJ8-63C8-RMFW Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/01/19 8:59 p.m.54 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5AI score0.00912EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/01/19 8:59 p.m.2 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.1AI score0.00912EPSS
SaveExploits0References3
CVE
CVE
added 2024/01/19 8:59 p.m.224 views

CVE-2024-23684

CVE-2024-23684 affects the Java CBOR library from com.upokecenter (CBOR) versions 4.0.0–4.5.1. The issue is an inefficient algorithmic path in DecodeFromBytes that can be exploited by a malicious input to cause a denial of service. The NVD entry notes a remote attacker scenario depending on appli...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.8 views

CBOR Security Breach

CBOR is a C implementation of Concise Binary Object Representation by the individual developer Peter Occil. A security vulnerability exists in Concise Binary Object Representation CBOR versions 4.0.0 through 4.5.1. An attacker could exploit this vulnerability to cause a denial of service by passi...

7.5CVSS6.6AI score0.00912EPSS
SaveExploits0References5
OSV
OSV
added 2023/08/24 7:15 a.m.3 views

DEBIAN-CVE-2023-4512

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.3AI score0.00486EPSS
SaveExploits1References1
Prion
Prion
added 2023/03/24 8:15 p.m.14 views

Memory corruption

A flaw was found in rizin. The createsectionfromphdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function...

4.4CVSS8AI score0.00414EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2018/03/29 12:0 a.m.8 views

Cloud Foundry Cloud Controller Path Traversal Vulnerability

Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from the Cloud Foundry Foundation, which provides container scheduling, continuous delivery, and automated service deployment.Cloud Controller is one of the cloud controllers. A path traversal vulnerability exists...

8.1CVSS7AI score0.01137EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/12/14 12:0 a.m.13 views

The vulnerability of the `usb_get_bos_descriptor` function in the Linux operating system’s kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbgetbosdescriptor function in the Linux kernel’s drivers/usb/core/config.c file relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially created USB device...

6.8CVSS7.1AI score0.00381EPSS
SaveExploits0References22Affected Software1
Rows per page
Query Builder