Lucene search
+L

2985 matches found

Snyk
Snyk
•added 2022/08/22 3:03 p.m.•8 views

Denial of Service (DoS)

Overview opcua is an OPC UA server / client API implementation for Rust. Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit thi...

7.5CVSS7AI score0.01292EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/08/22 12:56 p.m.•5 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e....

7.5CVSS7AI score0.01483EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/08/22 9:05 a.m.•3 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e....

7.5CVSS7AI score0.01414EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/18 9:15 p.m.•18 views

CVE-2022-36947

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

9.8CVSS5.9AI score0.02947EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/08/18 9:15 p.m.•11 views

CVE-2022-36947

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

9.8CVSS6.2AI score0.02947EPSS
SaveExploits0References4
NVD
NVD
•added 2022/08/18 9:15 p.m.•28 views

CVE-2022-36947

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

9.8CVSS0.02947EPSS
SaveExploits0References3
Prion
Prion
•added 2022/08/18 9:15 p.m.•32 views

Stack overflow

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

7.5CVSS9.5AI score0.02947EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/08/18 8:58 p.m.•36 views

CVE-2022-36947

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

9.8AI score0.02947EPSS
SaveExploits0References3
CVE
CVE
•added 2022/08/18 8:58 p.m.•97 views

CVE-2022-36947

The CVE-2022-36947 issue affects FastStone Image Viewer up to version 7.5, due to unsafe parsing of PNG tRNS chunks, which results in a stack buffer overflow. The vulnerability is described in the CVE entry with a NVD score of 9.8 (CRITICAL) and network/vector with no user interaction required. A...

9.8CVSS9.5AI score0.02947EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/18 12:00 a.m.•9 views

CVE-2022-36947: Out-of-bounds Write

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

9.8CVSS8.6AI score0.02947EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/08/18 12:00 a.m.•7 views

PT-2022-23694

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions prior to 7.6 Description The issue is related to the unsafe parsing of a PNG tRNS chunk, which results in a stack buffer overflow. Recommendations For FastStone Image Viewer versions prior to 7.6, update to...

9.8CVSS0.02947EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/08/11 12:00 a.m.•23 views

Red Hat Undertow 安全漏洞

Red Hat Undertow is a Java-based embedded web server from Red Hat, Inc. and is the default web server for Wildfly Java Application Server. Red Hat Undertow has a security vulnerability that stems from a DoS that can be realized when the Undertow server waits forever for an EJB call to LASTCHUNK...

4.9CVSS6.1AI score0.00885EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2022/08/04 4:46 a.m.•14 views

netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...

7.5CVSS6.7AI score0.06565EPSS
SaveExploits0References5
OSS-Fuzz
OSS-Fuzz
•added 2022/07/25 5:34 p.m.•14 views

lcms:cms_profile_fuzzer: Crash in EvalSegmentedFn

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5034737953013760 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsprofilefuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x003383d28258 Crash Stat...

5.9AI score
SaveExploits0
Prion
Prion
•added 2022/07/19 8:15 p.m.•39 views

Integer overflow

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gstmatroskadecompressdata function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however t...

4.4CVSS7.5AI score0.00464EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2022/07/19 7:10 p.m.•38 views

CVE-2022-1925

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gstmatroskadecompressdata function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however t...

7.7AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2022/07/19 7:10 p.m.•44 views

CVE-2022-1925

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gstmatroskadecompressdata function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however t...

8AI score0.00464EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2022/07/19 7:10 p.m.•63 views

CVE-2022-1925

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gstmatroskadecompressdata function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however t...

7.8CVSS7.9AI score0.00464EPSS
SaveExploits1
Veracode
Veracode
•added 2022/06/23 7:12 a.m.•35 views

Denial Of Service (DoS)

OPCFoundation.NetStandard.Opc.Ua is vulnerable to denial of service. The vulnerability exists due to improper configuration of maximum chunk count which allows malicious clients to cause an application crash via a carefully crafted message...

7.5CVSS6.9AI score0.01426EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/06/23 4:55 a.m.•30 views

Denial Of Service (DoS)

opcfoundation.netstandard.opc.ua is vulnerable to denial of service. The vulnerability exists due to the lack of maximum chunk count check-in requests which allows malicious clients to cause an application crash...

7.5CVSS7.1AI score0.01986EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder