Lucene search
K

7 matches found

NVD
NVD
added 2026/05/08 7:16 p.m.8 views

CVE-2026-41511

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory entry red-black tree of a Compound File Binary CFB document. A crafted CFB file with a cycle in the...

6.2CVSS0.00013EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 6:52 p.m.7 views

CVE-2026-41511

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory entry red-black tree of a Compound File Binary CFB document. A crafted CFB file with a cycle in the...

6.2CVSS5.7AI score0.00013EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/08 6:52 p.m.6 views

CVE-2026-41511 OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory entry red-black tree of a Compound File Binary CFB document. A crafted CFB file with a cycle in the...

6.2CVSS5.7AI score0.00013EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.1 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990179 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in t...

5.5CVSS6.2AI score0.0001EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989896 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in t...

5.5CVSS6.2AI score0.0001EPSS
Exploits0References4
OSV
OSV
added 2025/02/26 2:10 a.m.8 views

CVE-2022-49343 ext4: avoid cycles in directory h-tree

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its...

5.5CVSS5.2AI score0.0001EPSS
Exploits0References11
RedHat Linux
RedHat Linux
added 2022/11/15 11:55 a.m.0 views

kernel: ext4: avoid cycles in directory h-tree

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its...

5.5CVSS6.3AI score0.0001EPSS
Exploits0References5
Rows per page
Query Builder