169 matches found
CVE-2023-37930
Multiple issues including the use of uninitialized ressources CWE-908 and excessive iteration CWE-834 vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests...
CVE-2023-37930
CVE-2023-37930 affects Fortinet FortiOS/FortiProxy/FortiManager products. It involves use of uninitialized resources (CWE-908) and excessive iteration (CWE-834) that can cause memory corruption and potentially allow code or commands execution via specially crafted requests. The issue is addressed...
CVE-2023-37930
Multiple issues including the use of uninitialized ressources CWE-908 and excessive iteration CWE-834 vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests...
Use of uninitialized resource in SSLVPN websocket
...
Fortinet多款产品 安全漏洞
Fortinet FortiOS and others are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiProxy is a secure network proxy that protects...
CVE-2024-8049: Excessive Iteration
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...
CVE-2024-42237: Excessive Iteration
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...
CVE-2024-42071: Excessive Iteration
In the Linux kernel, the following vulnerability has been resolved: ionic: use devconsumeskbany outside of napi If we're not in a NAPI softirq context, we need to be careful about how we call napiconsumeskb, specifically we need to call it with budget==0 to signal to it that we're not in a safe...
CVE-2023-49316: Excessive Iteration
In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...
ROS-20230907-04
Vulnerability of DHcheck, DHcheckex or EVPPKEYparamcheck functions of OpenSSL library is related to using a regular expression with inefficient computational complexity. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service. Vulnerability of DHcheck,...
OpenSSL DH Check Buffer Overflow DoS
The vulnerabilities of the functions DHcheck, DHcheckex, and EVPPKEYparamcheck in the OpenSSL library are related to excessive iteration. Exploiting these vulnerabilities can allow a remote attacker to cause service failures...
Excessive Iteration
Overview Affected versions of this package are vulnerable to Excessive Iteration. Specially crafted requests can cause a termination of connection between a proxy and a backend. Remediation Upgrade grpc to version 1.53.2, 1.54.3, 1.55.2, 1.56.2 or higher. References - Advisory - GitHub Commit...
CVE-2023-29407
A flaw was found in the Golang tiff package, where it is vulnerable to a denial of service caused by an excessive iteration flaw. By persuading a victim to open a specially crafted image file, a remote attacker can cause excessive CPU consumption in decoding, resulting in a denial of service...
Excessive Iteration
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...
CVE-2023-1993: Excessive Iteration
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file...
GHSA-RWRX-X2HW-9H5W Apache Sling Resource Merger has Excessive Iteration vulnerability
Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger. This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2...
Apache Sling Resource Merger has Excessive Iteration vulnerability
Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger. This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2...
CVE-2023-26513
Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2...
