7636 matches found
PT-2020-12950 · Re2C +2 · Re2C +2
Name of the Vulnerable Software and Affected Versions: re2c version 1.3 Description: The issue is a heap-based buffer overflow in the Scanner::fill function located in parse/scanner.cc, which can be triggered by a long lexeme. Recommendations: For re2c version 1.3, consider restricting the input...
PT-2020-14913 · Freeipa +6 · Ipa +6
Name of the Vulnerable Software and Affected Versions: ipa versions 4.x.x through 4.8.0 Description: A flaw was found in the password hashing process. When a very long password = 1,000,000 characters is sent to the server, it could exhaust memory and CPU, leading to a denial of service and the...
Debian: Security Advisory (DLA-2178-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-11729
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
UBUNTU-CVE-2020-11729
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
Design/Logic Flaw
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
CVE-2020-11729
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
CVE-2020-11729
An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...
envoy: crafted request with long URI allows remote attacker to cause denial of service
A flaw was found in Envoy through version 1.11.1. Users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service through memory consumption. The highest thre...
CVE-2020-11528
bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...
Fedora: Security Advisory for coturn (FEDORA-2020-f3fcb1608a)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long...
CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2020-20708)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2020-20706)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2020-20707)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
Exclusion of Citrix embedded browser from the Citrix Workspace app 1912 LTSR for Windows
The Citrix Workspace app Long Term Service Release LTSR is released on a less frequent cadence with an extended lifecycle than the Workspace app Current Releases CR, offering predictability and less changes to the product. The Citrix Workspace app LTSR offers Cumulative Updates CU that contain...
USN-4303-2 linux-lts-xenial, linux-aws vulnerability
USN-4303-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Paulo Bonzini discovered that the KVM hypervisor implementation in the Linux kernel...
March 17, 2020—KB4541329 (OS Build 14393.3595)
None None...