Apache SystemDS 资源管理错误漏洞

A denial of service vulnerability exists in Apache SystemDS version 2.2.1 and earlier, which stems from the fact that the termination condition of the for loop in the readExternal method is a controlled variable. An attacker could use this vulnerability to tamper with the traversal to cause CPU...

Sending batch withdrawal requests can possibly DoS

Lines of code Vulnerability details Impact The function BatchRequests.sendWithdrawalRequests allows calling the sendWithdrawalRequests function on all of the Yieldy contracts at once. However, due to the unbounded for loop, if many Yieldy contracts are added to contracts, this function can...

Design/Logic Flaw

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop...

CVE-2021-44497

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop...

PT-2022-12144

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input can cause the bounds of a for loop to be miscalculated, leading to a use after free condition where a pointer is pushe...

CVE-2021-45907

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted...

DEBIAN-CVE-2021-45907

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted...

UBUNTU-CVE-2021-45907

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted...

CVE-2021-45907

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted...

PT-2021-24311

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A stack-based buffer overflow issue was discovered, involving a for loop. This issue makes it unlikely for an attacker to subvert the flow of control due to limited influence over the data written to the stac...

CVE-2021-45907: Out-of-bounds Write

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted...

gif2apng 缓冲区错误漏洞

gif2apng is a simple program that converts animations from GIF to APNG format. A security vulnerability exists in gif2apng, which stems from an issue discovered in gif2apng 1.9 with a stack-based buffer overflow involving a for loop...

PT-2021-30791

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.4 Description The issue is related to a wrong for loop range in the ipa resource function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26796

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.15.4 Description: The issue is related to a wrong for loop range in the ipa resource function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2020-8034

Name of the Vulnerable Software and Affected Versions: jsrender versions prior to 0.9.74 Description: The issue allows for remote code execution when jsrender is used with server-delivered client-side templates that dynamically embed user input. This can be exploited through specific template...

Design/Logic Flaw

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

CVE-2019-20911: Loop with Unreachable Exit Condition

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

Design/Logic Flaw

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service CPU consumption via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists...

CVE-2015-2313

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service CPU consumption via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists...

CVE-2015-2313: Uncontrolled Resource Consumption

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service CPU consumption via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists...