Lucene search
+L

550 matches found

OSV
OSV
added 2021/09/01 6:15 a.m.2 views

DEBIAN-CVE-2021-33582

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...

7.5CVSS7.3AI score0.0307EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/01 6:15 a.m.5 views

CVE-2021-33582

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...

7.5CVSS7AI score0.0307EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2021/09/01 5:32 a.m.31 views

CVE-2021-33582

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...

7.5CVSS7.3AI score0.0307EPSS
SaveExploits0
OSV
OSV
added 2021/09/01 12:0 a.m.6 views

UBUNTU-CVE-2021-33582

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...

7.5CVSS7.2AI score0.0307EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2021/09/01 12:0 a.m.23 views

CVE-2021-33582

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...

7.5CVSS7.1AI score0.0307EPSS
SaveExploits0References11
OSV
OSV
added 2021/07/21 10:15 p.m.8 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.5CVSS6.8AI score
SaveExploits0References3
NVD
NVD
added 2021/07/21 10:15 p.m.18 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.5CVSS0.01331EPSS
SaveExploits1References3
Prion
Prion
added 2021/07/21 10:15 p.m.25 views

Out-of-bounds

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

4.3CVSS5.5AI score0.01331EPSS
SaveExploits1References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/07/21 10:15 p.m.7 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.5CVSS6.1AI score0.01331EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2021/07/21 10:15 p.m.27 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.5CVSS6AI score0.01331EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2021/07/21 10:15 p.m.69 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.5CVSS5.8AI score0.01331EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/07/21 9:2 p.m.44 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.8AI score0.01331EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/07/21 9:2 p.m.71 views

CVE-2021-37220

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input...

5.5CVSS5.5AI score0.01331EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/07/21 12:0 a.m.8 views

MuPDF 缓冲区错误漏洞

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A buffer error vulnerability exists in MuPDF, which stems from a color converter in the product's buffer that does not properly take into account the size of the hash table's maximum key, and can be exploited by ...

5.5CVSS5.8AI score0.01331EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/05/31 12:0 a.m.15 views

PT-2021-6022 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.3 Description: The issue is related to the implementation of the IPv6 protocol in the Linux kernel, which contains defects and risks associated with the use of certain cryptographic algorithms. This can lea...

9.8CVSS7.4AI score0.88606EPSS
SaveExploits218References1091
FreeBSD
FreeBSD
added 2021/05/26 12:0 a.m.28 views

cyrus-imapd -- multiple-minute daemon hang via input that is mishandled during hash-table interaction

Cyrus IMAP 3.4.2 Release Notes states: Fixed CVE-2021-33582: Certain user inputs are used as hash table keys during processing. A poorly chosen string hashing algorithm meant that the user could control which bucket their data was stored in, allowing a malicious user to direct many inputs to a...

7.5CVSS0.5AI score0.0307EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/14 12:0 a.m.10 views

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in the hash table lookup in Google TensorFlow. No details of the vulnerability are provided at this time...

5.5CVSS5.5AI score0.00189EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/03/24 12:0 a.m.26 views

PT-2021-6032 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.4 Description: The issue is related to an information leak in the IPv4 implementation of the Linux kernel. This leak is caused by a small hash table in net/ipv4/route.c. The vulnerability may allow a remote...

9.8CVSS7.2AI score0.88606EPSS
SaveExploits222References1076
NVD
NVD
added 2021/02/22 7:15 a.m.22 views

CVE-2020-11272

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

10CVSS0.00806EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/22 7:15 a.m.29 views

Design/Logic Flaw

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

10CVSS9.4AI score0.00806EPSS
SaveExploits0References1
Rows per page
Query Builder