CVE-2020-27618

Summary (CVE-2020-27618) The vulnerability affects the GNU C Library (glibc) iconv input handling. When processing invalid multi-byte input sequences in specific IBM encodings, iconv may fail to advance the input state, potentially causing an infinite loop and a denial of service. This behavior i...

GNU C Library security vulnerability

The GNU C Library glibc, libc6 is an open source, free C language compiler released under the LGPL license. A security vulnerability exists in the GNU C Library that originates when processing invalid multibyte input sequences IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encoding, which could lead...

CVE-2021-3416

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS...

Regular Expression Denial of Service

Overview A Regular Expression Denial of Service vulnerability was discovered in esm. The issue is that esm's find-indexes is using the unescaped identifiers in a regex, which, in this case, causes an infinite loop. Recommendation Upgrade to version 3.1.0 or later References - WhiteSource Advisory...

UBUNTU-CVE-2021-20257

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits tx descriptors in processtxdesc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial o...

The vulnerability in the function of epan/dissectors/packet-fbzero.c of the Wireshark software allows a hacker to induce a service failure.

The vulnerability of the function in the epan/dissectors/packet-fbzero.c part of the Wireshark software is related to an infinite loop. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2021-20257

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits tx descriptors in processtxdesc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial o...

Fedora 33 : gdk-pixbuf2 / gdk-pixbuf2-xlib (2021-2e59756cbe)

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-2e59756cbe advisory. - GNOME gdk-pixbuf aka GdkPixbuf before 2.42.2 allows a denial of service infinite loop in lzw.c in the function writeindexes. if c-selfcode equals...

python: infinite loop in the tarfile module via crafted TAR archive

A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks header validation...

Moderate: Red Hat Security Advisory: python security update

An update for python is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

[SECURITY] [DLA 2556-1] unbound1.9 security update

Debian LTS Advisory DLA-2556-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 12, 2021 https://wiki.debian.org/LTS Package : unbound1.9 Version : 1.9.0-2+deb10u2deb9u1 CVE ID : CVE-2020-12662 CVE-2020-12663 CVE-2020-28935 Debian Bug : 977165 Several...

Security Bulletin: Public disclosured vulnerability found by vFinder: (All) Apache PDFBox

Summary IBM DataQuant has addressed the following vulnerability. Vulnerability Details Advisory CVE: CVE-2018-8036 CVEID: CVE-2018-8036 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by an out of memory exception in AFMParser. By persuading a victim to open a...

Design/Logic Flaw

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

Hirschmann Security Breach

Hirschmann OS2 and others are a hardware device from Hirschmann. A security vulnerability exists in Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 that allows an unauthenticated, neighboring attacker to cause an infinite loop on one of the device's HSR ring ports, resulting in a denial...

CVE-2020-24944

picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...

CVE-2020-24944

Picoquic (before 2020-07-03) contains a denial-of-service vulnerability where a crafted QUIC frame triggers an infinite loop. The issue is tied to the decode logic in picoquic_decode_frames and picoquic_decode_stream_frame when epoch==3. The confirmed impact is partial availability (per CVSSv2/v3...

OESA-2021-1034 djvulibre security update

DjVu is a set of compression technologies, a file format, and a software platform for the deliveryover the Web of digital documents, scanned documents, and high resolution images.DjVu documents download and display extremely quickly, and look exactly the same on all platforms with no compatibilit...

[ASA-202102-17] glibc: denial of service

Arch Linux Security Advisory ASA-202102-17 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2019-25013 CVE-2020-27618 CVE-2020-29562 CVE-2021-3326 Package : glibc Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1320 Summary...

OESA-2021-1030 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.\r\n\r\n Security Fixes:\r\n\r\n In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into ...

EulerOS 2.0 SP9 : qemu (EulerOS-SA-2021-1275)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA macro while...