Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2023/12/08 3:23 p.m.•52 views

Candid infinite decoding loop through specially crafted payload

Impact The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The proble...

7.5CVSS7AI score0.01212EPSS
SaveExploits0References9Affected Software1
osv_ghsa
osv_ghsa
•added 2023/12/08 3:23 p.m.•171 views

GHSA-7787-P7X6-FQ3J Candid infinite decoding loop through specially crafted payload

Impact The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The proble...

7.5CVSS7.5AI score0.01212EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2023/12/08 3:15 p.m.•49 views

CVE-2023-6245

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS7.2AI score0.01212EPSS
SaveExploits0References6
Mend
Mend
•added 2023/12/08 2:26 p.m.•5 views

CVE-2023-6245

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

8.7CVSS0.01212EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2023/12/08 2:26 p.m.•57 views

CVE-2023-6245 Infinite decoding loop through specially crafted payload

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS7.6AI score0.01212EPSS
SaveExploits0References5
osv_rustsec
osv_rustsec
•added 2023/12/08 12:00 p.m.•63 views

RUSTSEC-2023-0073 Infinite decoding loop through specially crafted payload

The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The problem with...

7.5CVSS7.4AI score0.01212EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•5 views

CVE-2023-6245: Loop with Unreachable Exit Condition

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS7.2AI score0.01212EPSS
SaveExploits0References6
Rows per page
Query Builder