Lucene search
+L

12397 matches found

OSV
OSV
added 2020/01/27 5:15 a.m.9 views

AZL-7205 CVE-2019-20421 affecting package exiv2 for versions less than 0.27.5-1

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.5CVSS6.8AI score0.04296EPSS
SaveExploits1References1
PyPA
PyPA
added 2020/01/27 5:15 a.m.8 views

PYSEC-2020-344

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.8CVSS6.6AI score0.04296EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2020/01/27 5:15 a.m.9 views

PYSEC-2020-344

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.5CVSS6.8AI score
SaveExploits0References5
OSV
OSV
added 2020/01/27 5:15 a.m.8 views

UBUNTU-CVE-2019-20421

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.5CVSS6.8AI score0.04296EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2020/01/27 4:22 a.m.40 views

CVE-2019-20421

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.8CVSS7.1AI score0.04296EPSS
SaveExploits1
CVE
CVE
added 2020/01/27 4:22 a.m.293 views

CVE-2019-20421

Exiv2 0.27.2 contains a vulnerability in Jp2Image::readMetadata() where processing certain input files can loop indefinitely, consuming CPU and enabling a remote DoS via a crafted file. Public advisories from Debian, AlmaLinux, Alpine, Mageia and others indicate fixed releases in or after 0.27.2;...

7.8CVSS7AI score0.04296EPSS
SaveExploits1References5Affected Software1
AlpineLinux
AlpineLinux
added 2020/01/27 4:22 a.m.43 views

CVE-2019-20421

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.8CVSS7.2AI score0.04296EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2020/01/24 4:00 p.m.58 views

CVE-2018-10546

An infinite loop vulnerability was found in ext/iconv/iconv.c in PHP due to the iconv stream not rejecting invalid multibyte sequences. A remote attacker could use this vulnerability to hang the php process and consume resources...

7.5CVSS1.9AI score0.10228EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/23 8:15 p.m.31 views

CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.5CVSS6.3AI score0.0361EPSS
SaveExploits1References10
Prion
Prion
added 2020/01/23 8:15 p.m.29 views

Integer overflow

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

4CVSS6.7AI score0.0361EPSS
SaveExploits1References10Affected Software8
Cvelist
Cvelist
added 2020/01/23 7:52 p.m.40 views

CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.6AI score0.0361EPSS
SaveExploits1References10
Debian CVE
Debian CVE
added 2020/01/23 7:40 p.m.54 views

CVE-2015-5278

The ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service infinite loop and instance crash or possibly execute arbitrary code via vectors related to receiving packets...

6.5CVSS8.1AI score0.0234EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2018-1108)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.04647EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.45 views

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2016-1066)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.7AI score0.00513EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2018-1309)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.10228EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for openwsman (EulerOS-SA-2019-2179)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.15243EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.36 views

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2019-2375)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.03098EPSS
SaveExploits15References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-2521)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.36974EPSS
SaveExploits9References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.38 views

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2019-1714)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.03407EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.47 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1026)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.0215EPSS
SaveExploits8References2
Rows per page
Query Builder