eap-7: heap exhaustion via deserialization

A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result i...

eap-7: heap exhaustion via deserialization

A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result i...

Red Hat EAP 7 Security Vulnerability

Red Hat EAP 7 is a middleware platform from Red Hat, Inc. built on open standards and compatible with the Java EE 7 specification. A security vulnerability exists in Red Hat EAP 7, which stems from a flaw found in the deserialization of certain classes that allows instantiation of HashMap and...

CVE-2023-5172

A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox 118...

net ipv6 output_core.c has an information leak because of certain use of a hash

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

net ipv4 route.c has an information leak because the hash table is very small

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small. Impact: Successful exploitation of this vulnerability could lead to disclosure of sensitive information. Pro ducts Affected Brocade Fabric OS v9.0 and later...

EulerOS Virtualization 3.0.6.6 : libxml2 (EulerOS-SA-2023-2412)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

The vulnerability of the IPv6 protocol implementation in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the IPv6 protocol implementation in Linux operating systems is related to uncontrolled resource consumption during the processing of hash tables. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending numerous SYN requests...

EulerOS Virtualization 3.0.6.0 : libxml2 (EulerOS-SA-2023-2212)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Possible cross-site scripting vulnerability in libxml after commit 960f0e2. CVE-2016-3709 - An issue was discovered in libxml2...

EulerOS Virtualization 2.11.1 : libxml2 (EulerOS-SA-2023-2039)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 2.11.0 : libxml2 (EulerOS-SA-2023-2091)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

PT-2023-35842 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 6 crash has been reported. The crash involves the functions fragment addresses equal, g hash table lookup extended, and fragme...

EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2023-1893)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2023-1924)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 3.0.2.0 : libxml2 (EulerOS-SA-2023-1740)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2023-1626)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 2.9.0 : libxml2 (EulerOS-SA-2023-1660)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

The vulnerability of the sock_hash_delete_elem() function in the net/core/sock_map.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sockhashdeleteelem function in the net/core/sockmap.c module of the Linux kernel is related to incorrect serialization of the resource htab-bucketsi.lock. Exploiting this vulnerability could allow an attacker to trigger a service denial-of-service attack...

Medium: libxml2

Issue Overview: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow,...

Medium: xmlsec1

Issue Overview: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a...