Lucene search
K

15 matches found

Snyk
Snyk
added 2026/05/29 9:14 p.m.4 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop through the Avro Decoder process. An attacker can exhaust CPU resources by providing a specially crafted payload with a large block-count value, causing the decoder to perform excessive iterations before propagating an...

8.7CVSS5.8AI score0.00055EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/28 9:35 a.m.29 views

CVE-2026-46124 isofs: validate block number from NFS file handle in isofs_export_iget

In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofsexportiget isofsfhtodentry and isofsfhtoparent pass an attacker- controlled block number ifid-block or ifid-parentblock from the NFS file handle to isofsexportiget, which...

7.5CVSS0.00046EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-38442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block...

5.5CVSS5.1AI score0.00088EPSS
Exploits0References2
OSV
OSV
added 2025/06/09 6:15 a.m.0 views

UBUNTU-CVE-2025-47711

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...

6.5CVSS6.2AI score0.00311EPSS
Exploits0References3
OSV
OSV
added 2025/06/09 6:15 a.m.0 views

UBUNTU-CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

6.5CVSS5.8AI score0.00272EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/05/13 11:39 p.m.2 views

SUSE CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

6.5CVSS6.5AI score0.00272EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.2 views

SUSE CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

2.6CVSS6.9AI score0.01439EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.3 views

SUSE CVE-2007-5498

The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service host OS crash via a request that specifies a large number of blocks...

4.9CVSS6.1AI score0.0005EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:25 a.m.2 views

SUSE CVE-2014-9112

Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive...

5CVSS7.2AI score0.01343EPSS
Exploits1References22
OSV
OSV
added 2014/12/02 4:59 p.m.1 views

DEBIAN-CVE-2014-9112

Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive...

5CVSS7.2AI score0.01343EPSS
Exploits1References1
OSV
OSV
added 2014/12/02 12:0 a.m.0 views

UBUNTU-CVE-2014-9112

Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive...

5CVSS6.9AI score0.01343EPSS
Exploits1References6
NVD
NVD
added 2013/08/02 12:10 p.m.15 views

CVE-2013-3219

bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions...

5CVSS6.6AI score0.00434EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2013/08/01 4:0 p.m.16 views

CVE-2013-3219

Removed by vendor...

5CVSS7AI score0.00434EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2008/05/20 2:12 p.m.3 views

perl-Crypt-CBC weaker encryption with some ciphers

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

2.6CVSS5.8AI score0.01439EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2008/05/07 7:39 a.m.6 views

missing sanity check in xen block backend driver

The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service host OS crash via a request that specifies a large number of blocks...

4.9CVSS5.8AI score0.0005EPSS
Exploits0References4
Rows per page
Query Builder