Lucene search
+L

12339 matches found

RedHat Linux
RedHat Linux
added 2022/04/20 7:30 p.m.9 views

openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of the certificate signature, any process that parses an externally supplied certificate may be subje...

7.5CVSS6.7AI score0.73188EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2022/04/20 1:03 p.m.10 views

haproxy: Denial of service via set-cookie2 header

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerabili...

7.5CVSS5.7AI score0.16563EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.11 views

The vulnerability of the Zend/zend_exceptions.c component of the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the Zend/zendexceptions.c component of the PHP programming language interpreter is related to an infinite loop. Exploiting this vulnerability can allow a malicious actor to cause service failures through the created Exception object...

7.8CVSS7.7AI score0.42401EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.11 views

The vulnerability of BitTorrent DHT traffic analyzer software from Wireshark allows a hacker to cause a service failure.

The vulnerability of BitTorrent DHT traffic analyzer software from Wireshark involves executing a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...

7.8CVSS7.2AI score0.03879EPSS
SaveExploits1References10Affected Software4
Veracode
Veracode
added 2022/04/19 11:06 a.m.19 views

Denial Of Service (DoS)

pypdf2 is vulnerable to denial of service DoS attacks. The vulnerability exists due to an infinite loop in the readInlineImage' function in the pdf.py which allows a malicious attacker to crash the system by sending a pdf file...

6.2CVSS3.5AI score0.01317EPSS
SaveExploits1References7Affected Software1
RedhatCVE
RedhatCVE
added 2022/04/19 8:41 a.m.39 views

CVE-2022-24859

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS2.7AI score0.01317EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/04/18 7:15 p.m.36 views

CVE-2022-24859

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS6.4AI score0.01317EPSS
SaveExploits1References6
Prion
Prion
added 2022/04/18 7:15 p.m.20 views

Code injection

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

4.3CVSS5.3AI score0.01317EPSS
SaveExploits1References6Affected Software2
PyPA
PyPA
added 2022/04/18 7:15 p.m.9 views

PYSEC-2022-194

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS7AI score0.01317EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/04/18 7:15 p.m.52 views

PYSEC-2022-194

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS2.7AI score0.01317EPSS
SaveExploits1References4
OSV
OSV
added 2022/04/18 7:15 p.m.13 views

UBUNTU-CVE-2022-24859

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS6.4AI score0.01317EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2022/04/18 12:00 a.m.6 views

CVE-2022-24859 Manipulated inline images can cause Infinite Loop in PyPDF2

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS6.3AI score0.01317EPSS
SaveExploits1References6
OSV
OSV
added 2022/04/18 12:00 a.m.20 views

CVE-2022-24859 Manipulated inline images can cause Infinite Loop in PyPDF2

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS5.8AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2022/04/18 12:00 a.m.116 views

CVE-2022-24859

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS5.8AI score0.01317EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/04/18 12:00 a.m.13 views

PyPDF2 安全漏洞

PyPDF2 is a free open source pure python PDF library . It can split, merge, crop and convert pages in PDF files. PyPDF2 has a security vulnerability that originated in versions prior to 1.27.5, which allows an attacker to create PDFs that will result in an infinite loop if PyPDF2 if the code trie...

6.2CVSS6.2AI score0.01317EPSS
SaveExploits1References11
Cvelist
Cvelist
added 2022/04/18 12:00 a.m.35 views

CVE-2022-24859 Manipulated inline images can cause Infinite Loop in PyPDF2

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

6.2CVSS6AI score0.01317EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/04/12 7:06 p.m.6 views

tomcat: Infinite loop while reading an unexpected TLS packet when using OpenSSL JSSE engine

A flaw was found in Apache Tomcat. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet can trigger an infinite loop, resulting in a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.07182EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2022/04/11 7:48 p.m.9 views

haproxy: Denial of service via set-cookie2 header

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerabili...

7.5CVSS5.7AI score0.16563EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/04/08 6:11 p.m.36 views

Infinite loop in .Net Bond

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'. Handling of large container lengths that could cause an infinite loop when deserializing some payloads...

7.5CVSS3.3AI score0.04844EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/04/08 6:11 p.m.47 views

GHSA-RQRC-8Q8F-CP9C Infinite loop in .Net Bond

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'. Handling of large container lengths that could cause an infinite loop when deserializing some payloads...

7.5CVSS7.3AI score0.04844EPSS
SaveExploits0References7
Rows per page
Query Builder