Lucene search
+L

8937 matches found

osv_ubuntu
osv_ubuntu
•added 2025/05/09 4:15 p.m.•21 views

UBUNTU-CVE-2025-4432

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS6.9AI score0.01029EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/05/09 4:06 p.m.•69 views

CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS0.01029EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2025/05/09 4:06 p.m.•20 views

CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS6.9AI score0.01029EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2025/05/09 4:06 p.m.•10 views

CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS6.9AI score0.01029EPSS
SaveExploits0References8
Mend
Mend
•added 2025/05/09 4:06 p.m.•7 views

CVE-2025-4432

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

6.9CVSS6.9AI score0.01029EPSS
SaveExploits0References11
CVE
CVE
•added 2025/05/09 4:06 p.m.•297 views

CVE-2025-4432

CVE-2025-4432 affects Rust’s Ring crate. A panic can be triggered when overflow checking is enabled; in QUIC, a specially crafted packet can induce this panic, likely ~1 in 2^32 packets. CVSS v3.1 base score 5.3 (Network, Low attack complexity, No privileges, No user interaction; Availability imp...

5.3CVSS6.9AI score0.01029EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2025/05/09 4:06 p.m.•46 views

CVE-2025-4432

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS6.9AI score0.01029EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/09 12:00 a.m.•4 views

CVE-2025-4432: Allocation of Resources Without Limits or Throttling

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS7AI score0.01029EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/09 12:00 a.m.•2 views

PT-2025-62964

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS7AI score0.01029EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/05/08 12:00 a.m.•15 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from insufficient privilege checking, which could lead to a security risk...

5.5CVSS6.3AI score0.00223EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/05/07 3:26 p.m.•40 views

scanner has a Public API without sufficient bounds checking

Match::get and Match::ptr lack sufficient bounds checks, leading to potential out of bounds reads...

7.1AI score
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/05/07 3:26 p.m.•12 views

GHSA-79M9-55JC-P6MW scanner has a Public API without sufficient bounds checking

Match::get and Match::ptr lack sufficient bounds checks, leading to potential out of bounds reads...

6.9CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/05/06 12:00 a.m.•18 views

PT-2025-19849 · Qualcomm · Snapdragon +13

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption caused by improper bounds checking during command handling in a camera kernel driver. This can lead to unspecified consequences. Recommendations: At...

7.8CVSS6.3AI score0.00114EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•16 views

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper command processing boundary checking in the camera-kernel driver, which could lead to memory corruption...

7.8CVSS6AI score0.00114EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•21 views

UNISOC Chipsets security vulnerabilities

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking and could lead to the disclosure of local information...

6.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/05/05 12:00 a.m.•21 views

Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS routers of the MX series is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted GRE packets...

7.8CVSS6.7AI score0.00424EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/03 1:21 a.m.•37 views

CVE-2025-32890

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message...

6.5CVSS5.9AI score0.00131EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/03 1:18 a.m.•39 views

CVE-2025-32882

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message...

6.5CVSS5.9AI score0.00093EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/01 6:15 p.m.•45 views

CVE-2025-32890

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message...

6.5CVSS0.00131EPSS
SaveExploits1References2
NVD
NVD
•added 2025/05/01 6:15 p.m.•54 views

CVE-2025-32882

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message...

6.5CVSS0.00093EPSS
SaveExploits0References2
Rows per page
Query Builder