Lucene search
K

629 matches found

OSV
OSV
added 2025/03/21 3:26 p.m.3 views

GHSA-G8VQ-V3MG-7MRG Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form

A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service DOS condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restorepreferences form. This leads to excessive memory consumption and potential system instability,...

8.7CVSS7AI score0.00534EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/03/21 7:51 a.m.20 views

CVE-2025-30160

A flaw was found in Redlib. This vulnerability allows an attacker to cause a denial of service DOS condition via a specially crafted base2048-encoded DEFLATE decompression bomb submitted to the restorepreferences form, leading to excessive memory consumption and potential system instability...

7.5CVSS6.3AI score0.00534EPSS
Exploits0References6
NVD
NVD
added 2025/03/20 7:15 p.m.10 views

CVE-2025-30160

Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service DOS condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restorepreferences form. This leads to excessive...

8.7CVSS0.00534EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/20 6:9 p.m.14 views

CVE-2025-30160 Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form

Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service DOS condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restorepreferences form. This leads to excessive...

8.7CVSS6.3AI score0.00534EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/20 6:9 p.m.22 views

CVE-2025-30160 Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form

Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service DOS condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restorepreferences form. This leads to excessive...

8.7CVSS0.00534EPSS
Exploits0References3
CVE
CVE
added 2025/03/20 6:9 p.m.58 views

CVE-2025-30160

Redlib exposes a Denial-of-Service vulnerability via a specially crafted base2048-encoded DEFLATE decompression bomb submitted to the restore_preferences form. The issue arises from decompressing user-supplied data without enforcing size limits, leading to extreme memory usage and potential syste...

8.7CVSS6.3AI score0.00534EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/03/20 6:9 p.m.4 views

CVE-2025-30160 Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form

Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service DOS condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restorepreferences form. This leads to excessive...

8.7CVSS7.2AI score0.00534EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-21730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: avoid to init mgntentry list twice when WoWLAN failed If WoWLAN failed in resume flow, the rtw89opsaddinterface triggered without removing the...

5.5CVSS6.7AI score0.00164EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-0443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is bei...

5.5CVSS6.7AI score0.00247EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-49425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will...

5.5CVSS5.8AI score0.00241EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in bind9

A malicious client can send numerous DNS messages via TCP, potentially causing the server to become unstable during the attack. The server may recover after the attack stops. The use of ACLs will not mitigate this attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through...

7.5CVSS7.3AI score0.0468EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the processstring function in the tracing module not properly handling array references. This could lead to fals...

5.5CVSS6.5AI score0.00198EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.2 views

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the sctpassociationinit function in the net/sctp module that could trigger an integer overflow, which could...

5.5CVSS6.5AI score0.00207EPSS
Exploits0References9
NVD
NVD
added 2025/01/13 11:15 a.m.12 views

CVE-2024-47897

Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instability and reboots...

8.8CVSS0.00578EPSS
Exploits0References1
CVE
CVE
added 2025/01/13 10:28 a.m.90 views

CVE-2024-47897

CVE-2024-47897 affects Imagination Technologies PowerVR-GPU driver (GPU DDK). The connected sources identify a vulnerability in PVRSRVRGXGetEnabledHWPerfBlocksKM that is an off-by-one out-of-bounds write, reported under the Imagination Technologies entries in the Android bulletin and CVE listings...

8.8CVSS6.6AI score0.00578EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/13 10:28 a.m.23 views

CVE-2024-47897 GPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write

Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instability and reboots...

0.00578EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/13 10:28 a.m.8 views

CVE-2024-47897 GPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write

Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instability and reboots...

7AI score0.00578EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.3 views

PT-2025-2782 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue arises when software is installed and run as a non-privileged user, leading to improper GPU system calls. This results in platform instability and reboots. Recommendations: At th...

8.8CVSS6.5AI score0.00578EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user may make incorrect GPU system calls, causing the platform to destabilize and reboot...

8.8CVSS6.7AI score0.00578EPSS
Exploits0References1
NVD
NVD
added 2025/01/10 9:15 p.m.7 views

CVE-2024-7095

On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...

4.3CVSS0.00464EPSS
Exploits0References1
Rows per page
Query Builder