Lucene search
K

8 matches found

OSV
OSV
added 2026/02/06 8:16 p.m.2 views

UBUNTU-CVE-2026-25727

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

6.8CVSS5.8AI score0.00291EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/02/06 7:20 p.m.5 views

CVE-2026-25727 time affected by a stack exhaustion denial of service attack

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

6.8CVSS5.4AI score0.00291EPSS
Exploits0References4
EUVD
EUVD
added 2026/02/06 7:20 p.m.6 views

EUVD-2026-5587

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

6.8CVSS5.3AI score0.00291EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:32 a.m.4 views

SUSE CVE-2022-2226

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an...

6.5CVSS8.7AI score0.00409EPSS
Exploits0References4
NVD
NVD
added 2022/12/22 8:15 p.m.7 views

CVE-2022-2226

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an...

6.5CVSS0.00409EPSS
Exploits0References2
OSV
OSV
added 2022/12/22 8:15 p.m.3 views

DEBIAN-CVE-2022-2226

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an...

6.5CVSS8.8AI score0.00409EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.5 views

The vulnerability of the Thunderbird email client arises from the lack of correlation between the date of the OpenPGP digital signature and the date of the electronic email. This allows attackers to perform spamming attacks.

The vulnerability of Thunderbird email client stems from the lack of correlation between the date of the OpenPGP digital signature and the date of the email message. Exploiting this vulnerability could allow a remote attacker to perform a spamming attack...

6.4CVSS6.8AI score0.00409EPSS
Exploits0References7Affected Software5
RedHat Linux
RedHat Linux
added 2022/07/01 1:31 a.m.4 views

Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this issue of when an OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, it will show the email's date. If the dat...

6.5CVSS7.3AI score0.00409EPSS
Exploits0References5
Rows per page
Query Builder