18831 matches found
CVE-2024-32886 Vitess vulnerable to infinite memory consumption and vtgate crash
Vitess is a database clustering system for horizontal scaling of MySQL. When executing the following simple query, the vtgate will go into an endless loop that also keeps consuming memory and eventually will run out of memory. This vulnerability is fixed in 19.0.4, 18.0.5, and 17.0.7...
CVE-2024-32886
CVE-2024-32886 affects Vitess vtgate, causing a Denial of Service via unbounded memory growth due to a bug in the collation/UTF-16 decoding path (affecting encodings like utf16/utf32/ucs2). Affected versions are fixed in Vitess releases 19.0.4, 18.0.5, and 17.0.7. The issue is demonstrated by a q...
DEBIAN-CVE-2024-4418
A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop method, the data pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's...
SUSE CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Google Golang 安全漏洞
Google Golang is a static strongly typed, compiled language from Google.Go's syntax is close to that of C, but differs with respect to variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages that...
PT-2024-24940 · Vitess · Vitess
Name of the Vulnerable Software and Affected Versions: Vitess versions prior to 17.0.7 Vitess versions prior to 18.0.5 Vitess versions prior to 19.0.4 Description: The issue arises when executing a specific query, causing the vtgate to enter an endless loop and consume increasing amounts of memor...
Oracle Linux 9 : buildah (ELSA-2024-2550)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2550 advisory. 1.33.7-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.7-1 - update to the latest content of...
Infinite loop
Overview std/net is a Go standard library package std/net Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report:A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. Remediation Upgrade std/net to versi...
GO-2024-2824 Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-0027
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-0027
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPFlowStats function in parser.py, which allows an attackers to trigger an infinite loop by setting the length of the inst parameter to 0...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPMultipartReply function in parser.py, allowing an attacker to trigger an infinite loop by setting the length parameter to 0...
Denial Of Service (DoS)
ryu is vulnerable to Denial of service. The vulnerability is due to inadequate input validation when the length=0 within the OFPHello function in parser.py, which results in an infinite loop...
Denial Of Service (DoS)
ryu is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of OFPGroupDescStats in ofprotov13parser.py, where setting the length of OFPBucket to 0 causes the offset and length to remain unchanged, leading to an infinite loop during parsing...
SUSE CVE-2022-48686
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the iowork loop when we set rdenabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted...
SUSE CVE-2022-48697
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blkmqcompleterequestremote+0xac/0x350 Read of size 4 at addr 0000607bd1835943 by task...
SUSE CVE-2024-34483
OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...