3552 matches found
Design/Logic Flaw
It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated...
EulerOS 2.0 SP5 : soundtouch (EulerOS-SA-2021-1705)
According to the versions of the soundtouch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock...
CVE-2021-3416
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU...
CVE-2021-3416
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU...
AZL-6829 CVE-2021-20255 affecting package qemu for versions less than 6.2.0-2
A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...
Regular Expression Denial Of Service (DoS)
pillow is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause excessive CPU consumption when parsing a malicious PDF file...
Regular Expression Denial-of-Service (ReDoS)
pillow is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause excessive CPU consumption when parsing a malicious PDF file...
Regular Expression Denial of Service
Overview Impact @progfay/scrapbox-parser before 6.0.3 and 7.0.2 are vulnerable to Regular Expression Denial of Service ReDoS in DecorationNode, StrongNode and ExternalLinkNode. An attacker may be able to craft text which causes the application to consume an excessive amount of CPU. Recommendation...
Regular expression Denial of Service in @progfay/scrapbox-parser
Impact A Regular expression Denial of Service flaw was found in the @progfay/scrapbox-parser package before 6.0.3, 7.0.2 for Node.js. The attacker that is able to be parsed a specially crafted text may cause the application to consume an excessive amount of CPU. Patches Upgrade to version 6.0.3,...
GHSA-9FHW-R42P-5C7R Regular expression Denial of Service in @progfay/scrapbox-parser
Impact A Regular expression Denial of Service flaw was found in the @progfay/scrapbox-parser package before 6.0.3, 7.0.2 for Node.js. The attacker that is able to be parsed a specially crafted text may cause the application to consume an excessive amount of CPU. Patches Upgrade to version 6.0.3,...
CVE-2021-20257
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits tx descriptors in processtxdesc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial o...
CVE-2021-20201
A flaw was found in spice. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...
Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2021-1058)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
postsrsd is vulnerable to denial of service DoS. The vulnerability exists as srs2.c allows remote attackers to cause a denial of service CPU consumption via a long timestamp tag in an SRS address...
CVE-2020-35573
srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service CPU consumption via a long timestamp tag in an SRS address...
CVE-2020-35573
srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service CPU consumption via a long timestamp tag in an SRS address...
Code injection
srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service CPU consumption via a long timestamp tag in an SRS address...
CVE-2020-35573
srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service CPU consumption via a long timestamp tag in an SRS address...
