Lucene search
+L

7640 matches found

Prion
Prion
added 2018/01/17 7:29 p.m.14 views

Design/Logic Flaw

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

4.3CVSS6AI score0.01275EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2018/01/17 7:29 p.m.6 views

DEBIAN-CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS6.6AI score0.01275EPSS
SaveExploits1References1
CVE
CVE
added 2018/01/17 7:00 p.m.79 views

CVE-2018-5747

CVE-2018-5747 is a use-after-free in lrzip 0.631 (Long Range ZIP) within ucompthread (stream.c) that could allow a remote attacker to cause a denial of service via a crafted lrz file. Affected product is lrzip; root cause is use-after-free in the decoding/stream path. Debian DLA-2725 fixes this i...

5.5CVSS5.8AI score0.01275EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2018/01/17 7:00 p.m.38 views

CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS7AI score0.01275EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2018/01/17 12:00 a.m.7 views

PT-2018-17121 · Lrzip +1 · Long Range Zip +1

Name of the Vulnerable Software and Affected Versions: Long Range Zip aka lrzip version 0.631 Description: The issue is related to a use-after-free in the ucompthread function, located in stream.c. This could allow remote attackers to cause a denial of service by providing a crafted lrz file...

9.8CVSS5.8AI score0.02485EPSS
SaveExploits6References45
CNVD
CNVD
added 2018/01/17 12:00 a.m.9 views

Long Range Zip Denial of Service Vulnerability

Long Range Zip aka lrzip is an open source compression utility for large files. A denial of service vulnerability exists in the 'unzipmatch' function of the runzip.c file in Long Range Zip version 0.631. A remote attacker can exploit this vulnerability to cause a denial of service infinite loop a...

5.5CVSS6.8AI score0.01172EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2018/01/12 10:29 p.m.23 views

CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS6.8AI score0.01172EPSS
SaveExploits1References4
OSV
OSV
added 2018/01/12 10:29 p.m.28 views

CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2018/01/12 10:29 p.m.20 views

CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS5.7AI score0.01172EPSS
SaveExploits1References2
OSV
OSV
added 2018/01/12 10:29 p.m.4 views

DEBIAN-CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS6.5AI score0.01172EPSS
SaveExploits1References1
CVE
CVE
added 2018/01/12 10:00 p.m.73 views

CVE-2018-5650

CVE-2018-5650 affects Long Range ZIP (lrzip) 0.631, where an infinite loop in unzip_match in runzip.c can cause a denial of service via a crafted .lrz file. Exploitation is described as remote: a attacker could trigger the loop by supplying a malicious lrz file, leading to application hang or cra...

5.5CVSS5.8AI score0.01172EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2018/01/12 10:00 p.m.29 views

CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.9AI score0.01172EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2018/01/12 10:00 p.m.35 views

CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

5.5CVSS7AI score0.01172EPSS
SaveExploits1
CNVD
CNVD
added 2018/01/02 12:00 a.m.7 views

NetTransport Download Manager Buffer Overflow Vulnerability

NetTransport Download Manager is a network download manager that supports various network protocols such as MMS, RTSP, PNM, HTTP and HTTPS. A buffer overflow vulnerability exists in the NetTransport.exe file in NetTransport Download Manager 2.96L and earlier versions. A remote attacker can exploi...

10CVSS8.2AI score0.39634EPSS
SaveExploits6References1
Prion
Prion
added 2017/12/30 5:29 p.m.19 views

Design/Logic Flaw

Red Lion HMI panels allow remote attackers to cause a denial of service software exception via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42...

7.8CVSS8.3AI score0.0139EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2017/12/30 5:29 p.m.8 views

CVE-2017-14855

Red Lion HMI panels allow remote attackers to cause a denial of service software exception via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42...

8.6CVSS5.9AI score0.0139EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2017/12/30 5:00 p.m.29 views

CVE-2017-14855

Red Lion HMI panels allow remote attackers to cause a denial of service software exception via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42...

8.4AI score0.0139EPSS
SaveExploits1References1
Schneier on Security
Schneier on Security
added 2017/12/29 10:23 p.m.38 views

Friday Squid Blogging: Squid Populations Are Exploding

New research: "Global proliferation of cephalopods" Summary: Human activities have substantially changed the world's oceans in recent decades, altering marine food webs, habitats and biogeochemical processes. Cephalopods squid, cuttlefish and octopuses have a unique set of biological traits,...

6.9AI score
SaveExploits0
OSV
OSV
added 2017/12/27 5:08 p.m.6 views

CVE-2017-17849

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response...

9.8CVSS6.4AI score0.19015EPSS
SaveExploits9References3
OSV
OSV
added 2017/12/27 5:08 p.m.7 views

DEBIAN-CVE-2017-17846

An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attempts to match arbitrarily long strings, aka TBE-01-003...

7.5CVSS7AI score0.02184EPSS
SaveExploits0References1
Rows per page
Query Builder