Lucene search
+L

12095 matches found

Github Security Blog
Github Security Blog
added 2025/10/09 10:15 p.m.11 views

Amazon.IonDotnet is vulnerable to Denial of Service attacks

Summary Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will no...

8.7CVSS7AI score0.00406EPSS
SaveExploits0References7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/09 6:43 p.m.11 views

Security Bulletin: IBM Storage Ceph is vulnerable to an Infinite Loop in Grafana (CVE-2024-24786)

Summary Grafana is used by IBM Storage Ceph as a metrics dashboard. CVE-2024-24786 This bulletin identifies the steps to take to address the vulnerability in Grafana. Vulnerability Details CVEID:CVE-2024-24786 DESCRIPTION: The protojson.Unmarshal function can enter an infinite loop when...

7.5CVSS8.9AI score0.01262EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/10/09 6:15 p.m.14 views

CVE-2025-11573

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS0.00406EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/09 5:48 p.m.17 views

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS0.00406EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/09 5:48 p.m.5 views

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS6.4AI score0.00406EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/09 5:48 p.m.30 views

CVE-2025-11573

CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...

8.7CVSS6.4AI score0.00406EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/09 5:48 p.m.8 views

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS5.9AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:00 a.m.6 views

Wireshark 4.2.x < 4.2.14 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.2.14. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.14 advisory. - MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service CVE-2025-11626...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:00 a.m.9 views

AlmaLinux 10 : python3.12 (ALSA-2025:14984)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:14984 advisory. cpython: Cpython infinite loop when parsing a tarfile CVE-2025-8194 Tenable has extracted the preceding description block directly from the AlmaLinux security...

7.5CVSS6.9AI score0.00611EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:00 a.m.8 views

Wireshark 4.2.x < 4.2.14 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.14. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.14 advisory. - MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2025/10/09 12:00 a.m.14 views

Amazon.IonDotnet is vulnerable to Denial of Service attacks

Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will not receiv...

8.7CVSS6.8AI score0.00406EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.18 views

PT-2025-41447

Name of the Vulnerable Software and Affected Versions Amazon.IonDotnet versions prior to 1.3.2 Description An infinite loop issue exists in the Amazon.IonDotnet library that could allow an attacker to cause a denial of service by providing a specially crafted text input. The library has been...

8.7CVSS6.5AI score0.00406EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-53481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubi: ubiwlputpeb: Fix infinite loop when wear-leveling work failed Following process will trigger an infinite loop in ubiwlputpeb: ubifsbgt ubibgt ubifslebunmap...

7.8CVSS5.6AI score0.00149EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/07 3:21 p.m.8 views

CVE-2023-53668 ring-buffer: Fix deadloop issue on reading trace_pipe

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issue on reading tracepipe Soft lockup occurs when reading file 'tracepipe': watchdog: BUG: soft lockup - CPU6 stuck for 22s! cat:4488 ... RIP: 0010:ringbufferemptycpu+0xed/0x170 RSP: 0018:ffff88810dd6fc...

5.2AI score
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.32 views

EUVD-2021-0412

Malware in sbrugna...

5.5CVSS5AI score0.00173EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-0994

Malware in sbrugna...

5CVSS6.4AI score0.01972EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2006-3082

Malware in sbrugna...

7.8CVSS6.3AI score0.03141EPSS
SaveExploits0References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2019-2620

Malware in sbrugna...

7.5CVSS7.6AI score0.04519EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2019-2619

Malware in sbrugna...

7.5CVSS7.6AI score0.04584EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-4513

Malware in sbrugna...

7.5CVSS8.5AI score0.02406EPSS
SaveExploits0References13
Rows per page
Query Builder