Lucene search
+L

6457 matches found

securityvulns
securityvulns
•added 2008/02/27 12:00 a.m.•27 views

SurgeFTP FTP server DoS

Administration web interface Content-Length memory consumption...

1.8AI score
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2008/02/15 12:00 a.m.•25 views

Debian: Security Advisory (DSA-1483-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.28966EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2008/02/11 12:00 a.m.•38 views

Debian DSA-1483-1 : net-snmp - design error

The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

7.8CVSS7.7AI score0.28966EPSS
SaveExploits1References2
Debian
Debian
•added 2008/02/06 7:14 p.m.•54 views

[SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1483-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 06, 2008 http://www.debian.org/security/faq -...

7.8CVSS6AI score0.28966EPSS
SaveExploits1
OSV
OSV
•added 2008/02/06 12:00 a.m.•46 views

DSA-1483-1 net-snmp - denial of service

Bulletin has no description...

7.8CVSS8.4AI score0.28966EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2008/01/29 12:00 a.m.•37 views

CVE-2007-4771

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode ICU 3.8.1 and earlier allows context-dependent attackers to cause a denial of service memory consumption and possibly have unspecified other impact via a regular expression that...

9.3CVSS7.4AI score0.02538EPSS
SaveExploits0References2
Prion
Prion
•added 2008/01/29 12:00 a.m.•23 views

Heap overflow

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode ICU 3.8.1 and earlier allows context-dependent attackers to cause a denial of service memory consumption and possibly have unspecified other impact via a regular expression that...

9.3CVSS7.3AI score0.04105EPSS
SaveExploits1References40Affected Software1
OSV
OSV
•added 2008/01/29 12:00 a.m.•11 views

CVE-2007-4771

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode ICU 3.8.1 and earlier allows context-dependent attackers to cause a denial of service memory consumption and possibly have unspecified other impact via a regular expression that...

7.3AI score
SaveExploits0References42
CVE
CVE
•added 2008/01/28 11:00 p.m.•104 views

CVE-2007-4771

CVE-2007-4771 is a heap-based overflow in ICU’s regex handling (doInterval in regexcmp.cpp) affecting ICU 3.8.1 and earlier. Attackers could cause memory consumption or denial of service by processing a crafted regular expression that writes a large amount of data to the backtracking stack. Affec...

9.3CVSS7AI score0.02538EPSS
SaveExploits0References40Affected Software1
OpenVAS
OpenVAS
•added 2008/01/17 12:00 a.m.•56 views

Debian Security Advisory DSA 324-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 324-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.04754EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2008/01/17 12:00 a.m.•24 views

Debian Security Advisory DSA 379-1 (sane-backends)

The remote host is missing an update to sane-backends announced via advisory DSA 379-1. OpenVAS Vulnerability Test $Id: deb3791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 379-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.5CVSS0.8AI score0.02093EPSS
SaveExploits5
RedHat Linux
RedHat Linux
•added 2008/01/11 12:37 p.m.•14 views

postgresql: tempory DoS caused by slow regex NFA cleanup

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

6.8CVSS5.8AI score0.03855EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2008/01/09 9:46 p.m.•43 views

CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

6.8CVSS5.8AI score0.03855EPSS
SaveExploits1References2
Prion
Prion
•added 2008/01/09 9:46 p.m.•29 views

Design/Logic Flaw

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

6.8CVSS5.9AI score0.03855EPSS
SaveExploits1References40Affected Software2
NVD
NVD
•added 2008/01/09 9:46 p.m.•27 views

CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

6.8CVSS5.8AI score0.03855EPSS
SaveExploits1References40
Cvelist
Cvelist
•added 2008/01/09 9:00 p.m.•44 views

CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

5.7AI score0.03855EPSS
SaveExploits1References40
CVE
CVE
•added 2008/01/09 9:00 p.m.•119 views

CVE-2007-6067

CVE-2007-6067 is an algorithmic complexity vulnerability in the TCL regular expression parser up to version 8.4.17, used by PostgreSQL 8.2/8.1/8.0/7.4 series. A crafted complex regex with doubly-nested states can be used by remote authenticated users to cause a denial of service via memory consum...

6.8CVSS5.7AI score0.03855EPSS
SaveExploits1References40Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/09 12:00 a.m.•6 views

CVE-2007-6067: Undefined Security Weakness

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

6.8CVSS5.8AI score0.03855EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2007/12/13 12:00 a.m.•50 views

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4185)

This kernel update fixes the following security problems : - The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network amplification between two routers. CVE-2007-2242 The default is that RH0 is disabled now. To...

7.8CVSS6.2AI score0.05035EPSS
SaveExploits1References18
securityvulns
securityvulns
•added 2007/12/12 12:00 a.m.•47 views

squids ICAP implementation lacks a defer check when reading from ICAP server

squids ICAP implementation does not check mem-store size before reading from an ICAP-server. If the user does not confirm browsers download-message-box, squid keeps on reading data from the ICAP server into the memory store, whilst no more data can be delivered to the client. Thus the memory stor...

1AI score
SaveExploits0
Rows per page
Query Builder