Lucene search
+L

16091 matches found

Snyk
Snyk
•added 2025/05/08 2:22 p.m.•11 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read due to the GB18030 encoding validation process. An attacker can achieve temporary denial of service by providing malformed input that triggers a buffer over-read. Remediation Upgrade libpq to version 14.22, 15.17, 16.13...

8.2CVSS7AI score0.00758EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/08 2:22 p.m.•68 views

CVE-2025-4207 PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

5.9CVSS0.00758EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/08 2:22 p.m.•29 views

CVE-2025-4207 PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

5.9CVSS5.6AI score0.00758EPSS
SaveExploits0References1
Mend
Mend
•added 2025/05/08 2:22 p.m.•5 views

CVE-2025-4207

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

8.2CVSS0.00758EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/05/08 2:22 p.m.•18 views

CVE-2025-4207

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

5.9CVSS6AI score0.00758EPSS
SaveExploits0
CVE
CVE
•added 2025/05/08 2:22 p.m.•478 views

CVE-2025-4207

CVE-2025-4207 describes a buffer over-read in PostgreSQL GB18030 encoding validation that can cause temporary denial of service by reading one byte past the end of allocation on platforms where such an over-read terminates the process. Affected components include the PostgreSQL server and libpq, ...

5.9CVSS5.6AI score0.00758EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2025/05/08 2:22 p.m.•12 views

CVE-2025-4207

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

5.9CVSS7.2AI score0.00758EPSS
SaveExploits0
PostrgeSql
PostrgeSql
•added 2025/05/08 12:00 a.m.•249 views

Vulnerability in core server (CVE-2025-4207)

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit proces...

5.9CVSS6.6AI score0.00758EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/08 12:00 a.m.•3 views

CVE-2025-4207: Buffer Over-read

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

5.9CVSS6.7AI score0.00758EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2025/05/08 12:00 a.m.•32 views

PostgreSQL -- PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

PostgreSQL project reports: A buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before...

5.9CVSS7AI score0.00758EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2025/05/08 12:00 a.m.•98 views

KLA83544 DoS vulnerability in PostgreSQL

Buffer over-read vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to cause denial of service. Original advisories PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation Exploitation Public exploits exist...

5.9CVSS6.1AI score0.00758EPSS
SaveExploits0References3
OSV
OSV
•added 2025/05/07 12:06 p.m.•5 views

SUSE-SU-2025:1504-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed heap buffer over-read in skipinsignificantspace when sniffing conten bsc1240750 - CVE-2025-32050: Fixed integer overflow in appendparamquoted bsc1240752 - CVE-2025-32051: Fixed segmentation fault when parsing malformed dat...

9CVSS6.7AI score0.00955EPSS
SaveExploits1References33
Tenable Nessus
Tenable Nessus
•added 2025/05/07 12:00 a.m.•10 views

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32052)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32052 advisory. - A flaw was found in libsoup. A vulnerability in the sniffunknown function May lead to heap buffer over- rea...

6.5CVSS7.1AI score0.00656EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/05/07 12:00 a.m.•15 views

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-2784)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2784 advisory. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via...

7CVSS7.3AI score0.00859EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•34 views

PT-2025-20383

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 17.5, 16.9, 15.13, 14.18, and 13.21 Description The vulnerability is related to a buffer over-read in PostgreSQL's GB18030 encoding validation. This issue allows a database input provider to achieve temporary denia...

5.9CVSS7.2AI score0.00758EPSS
SaveExploits0References172
Tenable Nessus
Tenable Nessus
•added 2025/05/07 12:00 a.m.•20 views

Azure Linux 3.0 Security Update: libsoup (CVE-2025-2784)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2784 advisory. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via...

7CVSS7.3AI score0.00859EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/05/06 8:32 a.m.•52 views

CVE-2025-21475 Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...

7.8CVSS0.00107EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/06 8:32 a.m.•18 views

CVE-2025-21475 Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...

7.8CVSS7.9AI score0.00107EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/06 8:32 a.m.•20 views

CVE-2025-21459 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing per STA profile in ML IE...

7.5CVSS6.9AI score0.00345EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/06 8:32 a.m.•55 views

CVE-2025-21459 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing per STA profile in ML IE...

7.5CVSS0.00345EPSS
SaveExploits0References1
Rows per page
Query Builder