Lucene search
+L

923 matches found

Github Security Blog
Github Security Blog
•added 2021/09/07 11:08 p.m.•161 views

Improper Handling of Missing Values in kaml

Impact Attackers that could provide arbitrary YAML input to an application that uses kaml could cause the application to endlessly loop while parsing the input. This could result in resource starvation and denial of service. This only affects applications that use polymorphic serialization with t...

6.5CVSS6.3AI score0.01658EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/08/27 7:15 p.m.•8 views

ALPINE-CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS6.7AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/27 7:15 p.m.•5 views

DEBIAN-CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS5.6AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/27 7:15 p.m.•11 views

UBUNTU-CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS6AI score0.00351EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2021/08/27 7:15 p.m.•69 views

CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS0.2AI score0.00351EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/08/27 12:00 a.m.•14 views

PT-2021-6610 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to long running loops in grant table handling. Xen maintains information on grant mappings a domain may create to map grants offered by other domains. When carrying out...

8.6CVSS6.3AI score0.0288EPSS
SaveExploits0References159
RedHat Linux
RedHat Linux
•added 2021/08/18 9:13 a.m.•11 views

pdfbox: infinite loop while loading a crafted PDF file

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS7.2AI score0.02993EPSS
SaveExploits0References4
OSV
OSV
•added 2021/08/09 10:15 p.m.•14 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS7.1AI score0.00942EPSS
SaveExploits1References1
NVD
NVD
•added 2021/08/09 10:15 p.m.•33 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS0.00942EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/09 10:15 p.m.•29 views

Design/Logic Flaw

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

4.3CVSS7.5AI score0.00942EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/08/09 10:15 p.m.•11 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS7AI score0.00942EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/09 9:19 p.m.•48 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.7AI score0.00942EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/09 12:00 a.m.•7 views

CVE-2021-38311: Loop with Unreachable Exit Condition

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS5.8AI score0.00942EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/08/02 12:00 a.m.•15 views

多款Qualcomm产品安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A security vulnerability exists in Qualcomm chips that stems from...

7.5CVSS7.3AI score0.00587EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/07/14 4:00 p.m.•13 views

CVE-2021-0295

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

6.1CVSS6.3AI score0.01097EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/07/02 1:15 p.m.•28 views

CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value MaxNameChars...

7.5CVSS0.01039EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/02 1:15 p.m.•26 views

CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value MaxNameChars...

7.5CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/02 1:15 p.m.•12 views

CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value MaxNameChars...

7.5CVSS7.2AI score0.01039EPSS
SaveExploits1References3
Prion
Prion
•added 2021/07/02 1:15 p.m.•25 views

Design/Logic Flaw

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value MaxNameChars...

5CVSS7.5AI score0.01039EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/07/02 1:01 p.m.•42 views

CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value MaxNameChars...

7.6AI score0.01039EPSS
SaveExploits1References2
Rows per page
Query Builder