GHSA-8F4F-V9X5-CG6J CloudCore UDS Server: Malicious Message can crash CloudCore

Impact A malicious message can crash CloudCore by triggering a null-pointer dereference in the UDS Server. Since the UDS Server only communicates with the CSI Driver on the cloud side, the attack is limited to the local host network. As such, an attacker would already need to be an authenticated...

CVE-2022-29177 DoS via malicious p2p message in Go-Ethereum

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that...

GHSA-52RH-5RPJ-C3W6 Improper handling of multiline messages in node-irc

node-irc is a socket wrapper for the IRC protocol that extends Node.js' EventEmitter. The vulnerability allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. Incorrect handling of a CR character allowed for making part of...

Improper handling of multiline messages in node-irc

node-irc is a socket wrapper for the IRC protocol that extends Node.js' EventEmitter. The vulnerability allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. Incorrect handling of a CR character allowed for making part of...

HTTP Request Smuggling

mitmproxy is vulnerable to HTTP request smuggling. The vulnerability exists because the header names contain whitespace characters by default, allowing an attacker to smuggle HTTP requests or responses by submitting a malicious message body...

Denial Of Service (DoS)

IBM MQ is vulnerable to denial of service. An attacker is able to exploit the vulnerability by sending a maliciously crafted message to crash the system...

Rocket.Chat: Maliciously crafted message can cause Rocket.Chat server to stop responding

Vulnerability description not provided...

HTTP Request Smuggling in akka-http-core

A vulnerable Akka HTTP server will accept a malformed message and hand it over to the user. If the user application proxies this message to another server unchanged and that server also accepts that message but interprets it as two HTTP messages, the second message has reached the second server...

GO-2021-0082 Denial of service via malicious message size declaration in github.com/facebook/fbthrift

Thrift Servers preallocate memory for the declared size of messages before checking the actual size of the message. This allows a malicious user to send messages that declare that they are significantly larger than they actually are, allowing them to force the server to allocate significant amoun...

CVE-2021-21404 Crash due to malformed relay protocol message

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2021-24914)

Huawei NGFW Module and others are products of Huawei, China.NGFW Module is a next-generation firewall NGFW module.USG6600 is a data-in-the-firewall product.Secospace USG6600 is a next-generation firewall product. A denial of service vulnerability exists in multiple Huawei products due to a module...

OPENSUSE-SU-2021:0476-1 Security update for openssl-1_1

This update for openssl-11 fixes the security issue: CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension but includes a signaturealgorithmscert...

Huawei Taurus-AL00A 资源管理错误漏洞

The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A memory misreference vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability arises because a module references freed memory when the program is processing certain messages. An...

Huawei Mate 30 out-of-bounds read vulnerability (CNVD-2021-07520)

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. An out-of-bounds read vulnerability exists in Huawei Mate version 10.0.0.182 C00E180R6P2. The vulnerability stems from the program not properly validating input. A local attacker can exploit the vulnerability by sending a...

Input validation

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service...

CVE-2018-4381

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1, iOS 12.1. Processing a maliciously crafted message may lead to a denial of service...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43444)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the ISDN subsystem of Cisco IOS and IOS XE, which can be exploited by an attacker to cause a process crash by sending a malicious ISDN Q.931...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43447)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the PROFINET handler for Link Layer Discovery Protocol LLDP messages in Cisco IOS and IOS XE, which can be exploited by an attacker to cause...

CVE-2020-3511

CVE-2020-3511 affects Cisco IOS and IOS XE ISDN Q.931 handling. The issue stems from insufficient input validation in the ISDN Q.931 message processing, which could allow an unauthenticated, adjacent attacker to cause a crash and reload, resulting in DoS. Vulnerable software includes Cisco IOS an...

CVE-2020-9096

HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160C00E160R2P8 have an out of bound read vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause...