Mattermost Server Resource Management Error Vulnerability (CNVD-2020-41488)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A resource management error vulnerability exists in Mattermost Server. An attacker could exploit this vulnerability to cause a denial of service memory consumption with OpenGraph...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41496)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server. An attacker could exploit this vulnerability to cause a denial of service memory consumption via an outgoing Webhook or slash command integratio...

CVE-2015-9548

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...

CVE-2015-9548

CVE-2015-9548 affects Mattermost Server prior to 1.2.0. The issue allows attackers to cause a denial of service via a small compressed file that expands to a large size in memory, leading to memory consumption. The CVSS vectors indicate a network-based attack with low complexity and no authentica...

CVE-2015-9548

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...

CVE-2015-9548

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

Command injection

An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service memory consumption via an outgoing webhook or a slash command integration...

CVE-2018-21250

Mattermost Server is affected before versions 5.2.2, 5.1.2, and 4.10.4. A remote attacker can cause a denial of service by supplying crafted image dimensions, leading to memory consumption. The issue is documented across multiple sources (CVE-2018-21250). No remediation details are provided in th...

CVE-2018-21250

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...

CVE-2019-20888

Mattermost Server contains a denial-of-service vulnerability (memory consumption) impacting versions before 5.7, 5.6.3, 5.5.2, and 4.10.5. The issue can be triggered by processing inputs from outgoing webhooks or slash command integrations. Red Hat and CNVD entries corroborate the affected versio...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

CVE-2019-20880

Mattermost Server vulnerable to denial-of-service via OpenGraph handling. Affected versions: before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Root cause described as OpenGraph processing leading to memory consumption (DoS). No exploitation details or attacker vectors provided in the documents. No remediat...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2019-20845

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

CVE-2019-20845

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

Information disclosure

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

CVE-2019-20845

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

CVE-2019-20845: Allocation of Resources Without Limits or Throttling

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

CVE-2018-21250: Uncontrolled Resource Consumption

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...