CVE-2022-31628

Removed by vendor...

PHP 安全漏洞

PHP is a scripting language that executes on the server side. A denial of service vulnerability exists in PHP versions prior to 7.4.31, 8.0.0 and later, 8.0.24 and earlier, and 8.1.0 and later, and 8.1.11 and earlier, which stems from the fact that the phar decompressor code recursively...

CVE-2022-0778 - Infinite loop in BN_mod_sqrt() reachable when parsing certificates

Security Advisory ID: BSA-2022-1752 Component: OpenSSL Revision: 2.0 The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. More information is at https://www.openssl.org/news/secadv/20220315.txt Affected Products Broca...

CVE-2022-28886

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-28886 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-3252

Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects HTTPRequestDecompressor and HTTPResponseDecompressor both failed to detect when the decompressed body was...

Apple SwiftNIO Extras 安全漏洞

Apple SwiftNIO Extras is an extension for the SwiftNIO web application framework from Apple Inc. A security vulnerability exists in Apple SwiftNIO Extras, which stems from the fact that if garbage data is appended to the body of an HTTP message, the code will repeatedly attempt to decompress this...

Important: golang

Issue Overview: An infinite loop vulnerability was found in golang. If an application defines a custom token parser initializing with xml.NewTokenDecoder it is possible for the parsing loop to never return. An attacker could potentially craft a malicious XML document which has an XML element with...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libtirpc (SUSE-SU-2022:3305-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3305-1 advisory. - CVE-2021-46828: Fixed denial of service vulnerability with lots of connections bsc1201680. Tenable has...

Denial Of Service (DoS)

pdfresurrect is vulnerable to denial of service. The vulnerability exists because of an infinite loop in getxreflinearskipped in pdf.c which allows an attacker to crash the application via a crafted PDF file...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to an infinite loop in USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring...

Denial Of Service (DoS)

pdftk-java is vulnerable to denial of service. The vulnerability exists in PdfReader.java which results in an infinite loop allowing an attacker to cause an application crash...

Wireshark Denial of Service Vulnerability (CNVD-2023-62295)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that stems from an infinite loop in its...

MGASA-2022-0336 Updated wireshark packages fix security vulnerability

F5 Ethernet Trailer dissector infinite loop wnpa-sec-2022-06...

PT-2022-37577 · F5 · F5

Name of the Vulnerable Software and Affected Versions: F5 affected versions not specified Description: The issue is related to an infinite loop in the F5 Ethernet Trailer dissector. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

SUSE SLES12: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2022:3263-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3263-1 advisory. The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

EulerOS 2.0 SP9 : golang (EulerOS-SA-2022-2288)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if...

AZL-10920 CVE-2022-3190 affecting package wireshark for versions less than 3.4.16-1

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file...

Wireshark 安全漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that stems from an infinite loop in its...

PT-2022-20979 · Wireshark +7 · Wireshark +7

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.4.0 through 3.4.15 Wireshark versions 3.6.0 through 3.6.7 Description: The issue is related to an infinite loop in the F5 Ethernet Trailer protocol dissector, which allows for denial of service via packet injection or...