Lucene search
+L

1408 matches found

RubySec
RubySec
•added 2017/04/03 12:00 a.m.•23 views

DoS caused by infinite recursion (stack overflow) in parse_char_class()

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

7.5CVSS5.6AI score0.03647EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2017/04/02 12:00 a.m.•1 views

PT-2017-1776

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 macOS versions prior to 10.12.4 tvOS versions prior to 10.2 watchOS versions prior to 3.2 Description The issue involves the CoreGraphics component and allows remote attackers to cause a denial of service via a craft...

5.5CVSS0.01366EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/02 12:00 a.m.•5 views

CVE-2017-2417: Loop with Unreachable Exit Condition

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to cause a denial of service infinite recursi...

5.5CVSS8.2AI score0.01366EPSS
SaveExploits0References2
nodejs
nodejs
•added 2017/03/21 7:17 p.m.•3427 views

Denial of Service

Overview Affected versions of jquery use a lowercasing logic on attribute names. When given a boolean attribute with a name that contains uppercase characters, jquery enters into an infinite recursion loop, exceeding the call stack limit, and resulting in a denial of service condition...

5CVSS4.5AI score0.03232EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2017/03/03 12:00 a.m.•7 views

PT-2017-4234

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.5 Description The issue is related to infinite recursion in parameter entities, which can be exploited by a remote attacker to cause a denial of service. Recommendations For versions prior to 2.9.5, update to...

7.8CVSS6.7AI score0.05928EPSS
SaveExploits1References154
Prion
Prion
•added 2017/02/24 8:59 p.m.•30 views

Buffer overflow

The dprintcomp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."...

4.3CVSS7.1AI score0.01772EPSS
SaveExploits0References4
Mend
Mend
•added 2017/02/24 8:00 p.m.•4 views

CVE-2016-4491

The dprintcomp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."...

6.8CVSS0.01772EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/24 12:00 a.m.•5 views

CVE-2016-4491: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dprintcomp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."...

5.5CVSS6.1AI score0.01772EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/02/24 12:00 a.m.•34 views

CVE-2016-4491

The dprintcomp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."...

5.5CVSS7AI score0.01772EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/02/24 12:00 a.m.•4 views

PT-2017-8506

Name of the Vulnerable Software and Affected Versions libiberty affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted binary. This is triggered by infinite recursion and a buffer...

9.1CVSS0.08506EPSS
SaveExploits16References477
OSV
OSV
•added 2017/02/24 12:00 a.m.•14 views

UBUNTU-CVE-2016-4491

The dprintcomp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."...

5.5CVSS7AI score0.01772EPSS
SaveExploits0References7
NVD
NVD
•added 2017/02/17 5:59 p.m.•33 views

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS9.7AI score0.02219EPSS
SaveExploits0References3
OSV
OSV
•added 2017/02/17 5:59 p.m.•29 views

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7.2AI score
SaveExploits0References3
Prion
Prion
•added 2017/02/17 5:59 p.m.•30 views

Design/Logic Flaw

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

7.5CVSS7.3AI score0.02219EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2017/02/17 5:59 p.m.•13 views

UBUNTU-CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7.3AI score0.02219EPSS
SaveExploits0References4
CVE
CVE
•added 2017/02/17 5:00 p.m.•78 views

CVE-2016-6875

CVE-2016-6875 corresponds to an infinite recursion in WDDX handling in Facebook HHVM prior to 3.15.0. The vulnerability statement notes an unspecified impact via unknown vectors. The linked metrics assign a high base score (CVSSv2: 7.5; CVSSv3: 9.8) with network access and low attack complexity, ...

9.8CVSS9.6AI score0.02219EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2017/02/17 5:00 p.m.•2 views

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS0.02219EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2017/02/17 5:00 p.m.•41 views

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.7AI score0.02219EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/17 12:00 a.m.•6 views

CVE-2016-6875: Undefined Security Weakness

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS5.8AI score0.02219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•3 views

PT-2017-9040

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to infinite recursion in wddx, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown. Recommendations For versions prior to 3.15.0,...

9.8CVSS0.02219EPSS
SaveExploits0References9
Rows per page
Query Builder