Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2026/04/10 6:31 p.m.3 views

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Log4j's JsonTemplateLayout, in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values NaN, Infinity, or -Infinity, which are prohibited by RFC 8259. This may cause downstream log processing systems to reject or fail to ind...

7.5CVSS5.8AI score0.00055EPSS
Exploits0References8Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-0107

Malware in sbrugna...

7.5CVSS7.4AI score0.00572EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.1 views

SUSE CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

5.3CVSS6.8AI score0.00678EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:53 a.m.1 views

SUSE CVE-2020-26890

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.5AI score0.00572EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2021/01/28 8:0 a.m.2 views

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure related to mishandling of the NAN and INFINITY floating-point values.

...

8.1CVSS7AI score0.00428EPSS
Exploits0
CNVD
CNVD
added 2017/09/22 12:0 a.m.1 views

libsndfile d2ulaw_array() function out-of-bounds read vulnerability (CNVD-2017-34008)

Libsndfile is a C library for reading and writing files containing sampled sounds e.g. MS Windows WAV and Apple/SGI AIFF formats through a standard library interface. An out-of-bounds read vulnerability exists in the d2ulawarray function in ulaw.c in Libsndfile, which can be exploited by a remote...

8.1CVSS6.5AI score0.00678EPSS
Exploits0References1
OSV
OSV
added 2017/09/21 1:29 p.m.1 views

DEBIAN-CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.8AI score0.00678EPSS
Exploits0References1
OSV
OSV
added 2017/09/21 12:0 a.m.0 views

UBUNTU-CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.8AI score0.00678EPSS
Exploits0References4
Rows per page
Query Builder