Lucene search
+L

1897 matches found

osv_alpine
osv_alpine
•added 2018/05/31 1:29 p.m.•9 views

ALPINE-CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS6.8AI score0.03917EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2018/05/31 1:29 p.m.•9 views

DEBIAN-CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS6.8AI score0.03917EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2018/05/31 12:00 a.m.•11 views

UBUNTU-CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS7AI score0.03917EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/31 12:00 a.m.•4 views

CVE-2018-5388: Buffer Underwrite

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS6.9AI score0.03917EPSS
SaveExploits0References3
Mend
Mend
•added 2018/05/31 12:00 a.m.•7 views

CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

7.1CVSS0.03917EPSS
SaveExploits0References14
CVE
CVE
•added 2018/05/31 12:00 a.m.•273 views

CVE-2018-5388

CVE-2018-5388 affects strongSwan up to version 5.6.2 (before 5.6.3). The stroke plugin did not verify the message length when reading from its control socket, allowing a buffer underflow that can cause resource exhaustion and denial of service. Impact is a DoS during socket reads; exploitation de...

6.5CVSS6.7AI score0.03917EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
•added 2018/05/31 12:00 a.m.•41 views

CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.8AI score0.03917EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2018/05/31 12:00 a.m.•26 views

CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS7AI score0.03917EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2018/05/31 12:00 a.m.•56 views

CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS7.1AI score0.03917EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2018/05/31 12:00 a.m.•80 views

CVE-2018-5388

In strokesocket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket...

6.5CVSS7AI score0.03917EPSS
SaveExploits0
CERT
CERT
•added 2018/05/23 12:00 a.m.•674 views

strongSwan VPN charon server vulnerable to buffer underflow

Overview strongSwan VPN's charon server prior to version 5.6.3 does not check packet length and may allow buffer underflow, resulting in denial of service. Description CWE-124: Buffer Underwrite 'Buffer Underflow' - CVE-2018-5388In strokesocket.c, a missing packet length check could allow a buffe...

6.5CVSS7.1AI score0.03917EPSS
SaveExploits0References2
Prion
Prion
•added 2018/04/19 8:29 p.m.•29 views

Design/Logic Flaw

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

7.8CVSS8.5AI score0.04437EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
•added 2018/04/19 8:00 p.m.•17 views

CVE-2018-0231

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

7.3AI score0.04437EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/04/19 8:00 p.m.•47 views

CVE-2018-0231

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

8.6AI score0.04437EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/19 12:00 a.m.•4 views

CVE-2018-0231: Improper Input Validation

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

8.6CVSS7.8AI score0.04437EPSS
SaveExploits0References9
Cisco
Cisco
•added 2018/04/18 4:00 p.m.•110 views

Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

8.6CVSS8.6AI score0.04437EPSS
SaveExploits0References1
Oracle linux
Oracle linux
•added 2018/04/16 12:00 a.m.•87 views

glibc security, bug fix, and enhancement update

2.17-222 - Restore internal GLIBCPRIVATE symbols for use during upgrades 1523119 2.17-221 - CVE-2018-1000001: Fix realpath buffer underflow 1534635 - i386: Fix unwinding for 32-bit C++ application 1529982 - Reduce thread and dynamic loader stack usage 1527904 - x86-64: Use XSAVE/XSAVEC more often...

9.8CVSS0.2AI score0.13368EPSS
SaveExploits13
RedHat Linux
RedHat Linux
•added 2018/04/10 8:47 a.m.•23 views

glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation

In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buffer leading to a buffer underflow and potential code execution...

7.8CVSS7.6AI score0.13368EPSS
SaveExploits10References4
Veracode
Veracode
•added 2018/04/06 8:47 a.m.•30 views

Denial Of Service (DoS) Through Stack Buffer Underflow

libarchive.so is vulnerable to denial of service DoS. The vulnerability exists due to a possible stack buffer underflow issue when parsing the ar header...

5.5CVSS6.2AI score0.01917EPSS
SaveExploits0References14Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2018/03/21 3:46 p.m.•31 views

gdal/gdal_translate_fuzzer: Stack-buffer-underflow in reduce

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5156689281024000 Project: gdal Fuzzer: aflgdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address:...

6.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder