7636 matches found
DEBIAN-CVE-2012-1572
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space...
Stack overflow
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space...
CVE-2012-1572
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space...
CVE-2012-1572
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space...
python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data
Modules/pickle.c in Python before 3.7.1 has an integer overflow via a large LONGBINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of...
libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c
idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...
edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media
Buffer overflows were discovered in UDF-related codes under MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe, which could be triggered with long file names or invalid formatted UDF media...
CVE-2009-5041
overkill has buffer overflow via long player names that can corrupt data on the server machine...
CVE-2009-5041
overkill has buffer overflow via long player names that can corrupt data on the server machine...
CVE-2009-5041
CVE-2009-5041 describes a buffer overflow in the affected system caused by excessively long player names, potentially corrupting data on the server. The connected documents do not specify the exact product/version or a fix. NVD lists a network attack surface with high impact (CVSS v2: 7.5; CVSS v...
CVE-2009-5041
overkill has buffer overflow via long player names that can corrupt data on the server machine...
CVE-2016-4289
A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99...
CVE-2016-4289
A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99...
CVE-2019-15225
A flaw was found in Envoy through version 1.11.1. Users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service through memory consumption. The highest thre...
CVE-2016-2356
Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...
CVE-2016-2356
Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...
GHSA-J7MJ-748X-7P78 DOS attack in Pillow when processing specially crafted image files
An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image...
ALPINE-CVE-2019-18224
idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...