Lucene search
+L

35 matches found

Veracode
Veracode
added 2020/08/13 4:32 a.m.47 views

Denial Of Service (DoS)

github.com/golang/go is vulnerable to denial of service. An infinite read loop in ReadUvarint and ReadVarint allows an attacker to create a denial of service condition via malicious input...

7.5CVSS6.1AI score0.0473EPSS
SaveExploits0References23Affected Software92
CNVD
CNVD
added 2020/08/10 12:00 a.m.7 views

Google Go Denial of Service Vulnerability (CNVD-2020-46848)

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A security vulnerability exists in Google Go versions prior to 1.13.15 and 14.x prior to 1.14.7. An attacker can exploit the vulnerability with invalid input to cause an infinite...

7.5CVSS8.7AI score0.0473EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/06 6:15 p.m.23 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7.6AI score0.0473EPSS
SaveExploits0References15
OSV
OSV
added 2020/08/06 6:15 p.m.10 views

AZL-79098 CVE-2020-16845 affecting package golang 1.26.5-2

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.8AI score0.0473EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/06 6:15 p.m.39 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.8AI score
SaveExploits0References15
OSV
OSV
added 2020/08/06 6:15 p.m.9 views

UBUNTU-CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.9AI score0.0473EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2020/08/06 6:15 p.m.45 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.8AI score0.0473EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2020/08/06 5:03 p.m.35 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.8AI score0.0473EPSS
SaveExploits0References15
Debian CVE
Debian CVE
added 2020/08/06 5:03 p.m.40 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7.1AI score0.0473EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2020/08/06 5:03 p.m.66 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7.9AI score0.0473EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/04/04 12:00 a.m.31 views

EulerOS Virtualization 2.5.3 : tar (EulerOS-SA-2019-1262)

According to the version of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of...

4.7CVSS6.3AI score0.00526EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/01/11 9:07 p.m.45 views

GNU tar has been updated to fix CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS3.6AI score0.00526EPSS
SaveExploits1References2
CNVD
CNVD
added 2018/12/27 12:00 a.m.10 views

GNU tar Denial of Service Vulnerability

GNU Tar is a set of tools developed by the GNU Project for creating files in tar format. A security vulnerability exists in GNU Tar versions 1.30 and earlier, which stems from the program's failure to properly handle file shrinking. A local attacker can exploit this vulnerability by modifying the...

4.7CVSS6.8AI score0.00526EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/26 6:29 p.m.6 views

UBUNTU-CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS6.7AI score0.00526EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2018/06/12 12:00 a.m.11 views

PT-2018-11059 · Sangoma · Asterisk Open Source

Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 15.x before 15.4.1 Description: An issue was discovered in Asterisk Open Source. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk get...

6.8CVSS6.6AI score0.05644EPSS
SaveExploits1References7
Rows per page
Query Builder