CVE-2021-45297

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

CVE-2021-45297

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

DEBIAN-CVE-2021-45297

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

Information disclosure

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

CVE-2021-45297

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

UBUNTU-CVE-2021-45297

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

RLSA-2021:5238 Low: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting wi...

CVE-2021-45297

GPAC 1.0.1 contains an infinite loop in gf_get_bit_size (CVE-2021-45297). This GPAC multimedia framework issue can cause a denial-of-service condition (partial availability impact per CVSS info). Debian and Gentoo advisories note fixes up to 1.0.1+dfsg1-4+deb11u2; upgrade GPAC to the patched vers...

CVE-2021-45297

Removed by vendor...

CVE-2021-45297

An infinite loop vulnerability exists in Gpac 1.0.1 in gfgetbitsize...

PT-2021-24228 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: An infinite loop issue exists in the gf get bit size function of Gpac. Recommendations: For Gpac version 1.0.1, consider disabling the gf get bit size function as a temporary workaround until a patch is...

USN-5201-1 python3.8, python3.9 vulnerabilities

It was discovered that the Python urllib http client could enter into an infinite loop when incorrectly handling certain server responses 100 Continue response. Specially crafted traffic from a malicious HTTP server could cause a denial of service Dos condition for a client...

USN-5200-1: Python vulnerabilities

It was discovered that the urllib.request.AbstractBasicAuthHandler class in Python contains regex allowing for catastrophic backtracking. Specially crafted traffic from a malicious HTTP server could cause a regular expression denial of service ReDoS condition for a client. CVE-2020-8492 It was...

openSUSE 15 Security Update : python3 (openSUSE-SU-2021:4104-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:4104-1 advisory. - There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to...

The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client involves a cycle that can be executed with an unavailable exit condition, allowing an attacker to perform a denial-of-service attack.

The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure through an infinite loop error when using the Location...

GHSA-Q6GQ-997W-F55G Withdrawn Advisory: Infinite loop in xz

Withdrawn Advisory This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time. Original Description Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

Withdrawn Advisory: Infinite loop in xz

Withdrawn Advisory This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time. Original Description Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service which becomes unresponsive after this flaw is triggered.

...

Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by multiple N series products. Multiple N series products have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of servic...

CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior ...