Lucene search
+L

52 matches found

Mageia
Mageia
added 2018/02/22 7:49 p.m.16 views

Updated qpdf packages fix security vulnerability

Qpdf has been updated to the latest version to fix several security issues. - Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral - Another stack overflow / endless recursion in QPDFWriter::enqueueObject - Stack out of bounds read in iteraterc4 - heap out of bounds read...

3AI score
SaveExploits0References2
Prion
Prion
added 2018/02/13 7:29 p.m.13 views

Design/Logic Flaw

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

4.3CVSS6.8AI score0.01104EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/02/13 7:29 p.m.7 views

CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

5.5CVSS6.6AI score
SaveExploits0References5
OSV
OSV
added 2018/02/13 7:29 p.m.4 views

DEBIAN-CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

5.5CVSS7AI score0.01104EPSS
SaveExploits0References1
CVE
CVE
added 2018/02/13 7:00 p.m.89 views

CVE-2015-9252

CVE-2015-9252 concerns QPDF before 7.0.0. The issue is an endless recursion in QPDFTokenizer::resolveLiteral() related to the QPDF::resolve function in QPDF.cc, causing stack exhaustion (denial of service). Affected component is the QPDF library used by various packages; no patch/version fix deta...

5.5CVSS5.4AI score0.01104EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2018/02/13 7:00 p.m.72 views

CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

5.5CVSS5.6AI score0.01104EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2018/02/13 12:00 a.m.30 views

CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

5.5CVSS6.4AI score0.01104EPSS
SaveExploits0References2
OSV
OSV
added 2017/04/05 8:59 p.m.36 views

CVE-2017-0886

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...

6.5CVSS6.5AI score
SaveExploits0References2
Nextcloud
Nextcloud
added 2017/02/05 12:00 a.m.35 views

Denial of Service attack (NC-SA-2017-004)

Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...

4CVSS4.3AI score0.0123EPSS
SaveExploits0Affected Software1
securityvulns
securityvulns
added 2008/12/02 12:00 a.m.57 views

ClamAV antivirus JPEG files DoS

Endless recursion on malformed JPEG file processing...

3.9AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.26 views

Debian Security Advisory DSA 1155-2 (sendmail)

The remote host is missing an update to sendmail announced via advisory DSA 1155-2. It turned out that the sendmail binary depends on libsasl2 = 2.1.19.dfsg1 which is neither available in the stable nor in the the security archive. This version is scheduled for the inclusion in the next update of...

5CVSS7.5AI score0.05173EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.19 views

Debian: Security Advisory (DSA-1155-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.5AI score0.05173EPSS
SaveExploits0References3
Rows per page
Query Builder