python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data

Modules/pickle.c in Python before 3.7.1 has an integer overflow via a large LONGBINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of...

glibc: Unbounded stack allocation in catopen function

A stack based buffer overflow vulnerability was found in the catopen function. An excessively long string passed to the function could cause it to crash or, potentially, execute arbitrary code...

PT-2017-18011

Name of the Vulnerable Software and Affected Versions DMitry version 1.3a Description A stack-based buffer overflow in DMitry allows attackers to cause a denial of service or possibly have other unspecified impact via a long argument. An example threat model is the automated execution of DMitry...

PT-2017-8452

Name of the Vulnerable Software and Affected Versions moment versions prior to 2.11.2 Description The duration function in the moment package allows remote attackers to cause a denial of service CPU consumption via a long string, also known as a "regular expression Denial of Service ReDoS". This...

Vulnerabilities of the command-line utility Grep, allowing a hacker to execute arbitrary code or cause a service failure

The multiple vulnerabilities of the Grep command-line utility are caused by a numerical overflow. Exploiting these vulnerabilities allows an attacker operating remotely to execute arbitrary code or cause a system failure termination of the program by entering an excessively long string of...

UBUNTU-CVE-2016-6293

The ulocacceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode ICU through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service out-of-bounds read or...

The vulnerability of the Commons FileUpload library allows a perpetrator to trigger a service failure.

The vulnerability of the MultipartStream class in the Commons FileUpload library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause a service failure resulting in increased computational resources usage through the use of a lo...

UBUNTU-CVE-2015-8982

Integer overflow in the strxfrm function in the GNU C Library aka glibc or libc6 before 2.21 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow...

Django 'utils.html.strip_tags' function denial of service vulnerability

Django is Django Software Foundation of an open source Web application framework using the Python language . The framework includes an object-oriented mapper, view system, template system and so on. A security vulnerability exists in Django's 'utils.html.striptags' function. A remote attacker can...

Low: coreutils

Issue Overview: It was discovered that the sort, uniq, and join utilities did not properly restrict the use of the alloca function. An attacker could use this flaw to crash those utilities by providing long input strings. CVE-2013-0221, CVE-2013-0222, CVE-2013-0223 Affected Packages: coreutils...

coreutils: segfault in "sort -d" and "sort -M" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the sort command, when using the 1 -d or 2 -M switch, which triggers a stack-based buffer overflow in the alloca function...

coreutils: segfault in "join -i" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function...

DEBIAN-CVE-2012-5667

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow...

CVE-2012-5667: Undefined Security Weakness

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow...

CVE-2012-3021

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service memory corruption and service crash or possibly execute arbitrary code via long input data, a different vulnerabili...

DEBIAN-CVE-2012-3480

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

DEBIAN-CVE-2009-0148

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as 1 source-code tokens and 2 pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541...

CVE-2009-1045

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service stack consumption and crash via a long input argument in an inplay action...

CVE-2009-1045: Improper Input Validation

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service stack consumption and crash via a long input argument in an inplay action...

libsoup: integer overflow in soup_base64_encode()

Integer overflow in the soupbase64encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation...