Lucene search
+L

115 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:37 p.m.27 views

futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer

Affected versions of the crate used a UnsafeCell in thread-local storage to return a noop waker reference, assuming that the reference would never be returned from another thread. This resulted in a segmentation fault crash if Waker::wakebyref was called on a waker returned from another thread du...

5.5CVSS5.4AI score0.00402EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2020/12/31 9:15 a.m.14 views

CVE-2020-35907

An issue was discovered in the futures-task crate before 0.3.5 for Rust. futurestask::noopwakerref allows a NULL pointer dereference...

5.5CVSS6.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/31 12:00 a.m.18 views

Rust Code Issues Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A code issue vulnerability exists in Rust futures-task crate before 0.3.5, which stems from a noop waker ref that allows null pointer dereferencing...

5.5CVSS5.9AI score0.00402EPSS
SaveExploits1References2
Oracle linux
Oracle linux
added 2020/11/10 12:00 a.m.53 views

dovecot security update

1:2.3.8-4 - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866756 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation 1866761 - fix CVE-2020-12674 crash due to assert in RPA implementation 1866768 1:2.3.8-3 - fix CVE-2020-10957 dovecot: malformed NOOP...

7.5CVSS1.5AI score0.08153EPSS
SaveExploits9
Veracode
Veracode
added 2020/07/15 2:56 a.m.22 views

Denial Of Service (DoS)

dovecot is vulnerable to denial of service DoS. The vulnerability exists as an malformed NOOP commands leads to DoS...

7.5CVSS2AI score0.07167EPSS
SaveExploits3References14Affected Software1
Oracle linux
Oracle linux
added 2020/07/14 12:00 a.m.42 views

dovecot security update

1:2.3.8-2.1 - fix CVE-2020-10957: malformed NOOP commands leads to DoS 1840353...

7.5CVSS1.3AI score0.07167EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2020/05/19 12:00 a.m.29 views

FreeBSD : Dovecot -- Multiple vulnerabilities (37d106a8-15a4-483e-8247-fcb68b16eaf8)

Aki Tuomi reports : Vulnerability Details : Sending malformed NOOP command causes crash in submission, submission-login or lmtp service. Risk : Remote attacker can keep submission-login service down, causing denial of service attack. For lmtp the risk is neglible, as lmtp is usually behind a...

7.5CVSS6.6AI score0.08153EPSS
SaveExploits5References5
RedhatCVE
RedhatCVE
added 2020/05/18 2:26 p.m.26 views

CVE-2020-10957

A flaw was found in Dovecot, where it did not properly handle certain malformed NOOP commands. This flaw allows a malicious attacker to cause the submission, submission-login, or lmtp services to crash by sending specially crafted commands...

5CVSS2.8AI score0.07167EPSS
SaveExploits3References4
OSV
OSV
added 2020/05/18 2:15 p.m.3 views

DEBIAN-CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

7.5CVSS7.5AI score0.07167EPSS
SaveExploits3References1
OSV
OSV
added 2020/05/18 2:15 p.m.9 views

ALPINE-CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

7.5CVSS7.2AI score0.07167EPSS
SaveExploits3References1
Prion
Prion
added 2020/05/18 2:15 p.m.19 views

Null pointer dereference

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

5CVSS7.4AI score0.07167EPSS
SaveExploits3References10Affected Software1
AlpineLinux
AlpineLinux
added 2020/05/18 1:56 p.m.41 views

CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

7.5CVSS7.6AI score0.07167EPSS
SaveExploits3
Debian CVE
Debian CVE
added 2020/05/18 1:56 p.m.20 views

CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

7.5CVSS7.8AI score0.07167EPSS
SaveExploits3
UbuntuCve
UbuntuCve
added 2020/05/18 12:00 p.m.30 views

CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

7.5CVSS7.1AI score0.07167EPSS
SaveExploits3References2
OSV
OSV
added 2020/05/18 12:00 p.m.6 views

UBUNTU-CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp...

7.5CVSS7.2AI score0.07167EPSS
SaveExploits3References3
CNVD
CNVD
added 2018/08/27 12:00 a.m.3 views

xkbcommon null pointer dereference vulnerability (CNVD-2019-02669)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ResolveStateAndPredicate' function of the xkbcomp/compat.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker to cause the...

5.5CVSS6.3AI score0.00553EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/10/22 12:00 a.m.21 views

FileCopa FTP Server 'NOOP' Command DoS Vulnerability

This host is running FileCopa FTP Server and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfilecopaftpservernoopdosvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ FileCopa FTP Server 'NOOP' Command DoS Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

5CVSS0.02653EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2009/10/22 12:00 a.m.16 views

FileCopa FTP Server 'NOOP' Command DoS Vulnerability

FileCopa FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.02653EPSS
SaveExploits2References3
Prion
Prion
added 2009/10/11 10:30 p.m.15 views

Command injection

FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service server hang via a large number of crafted NOOP commands...

5CVSS7.1AI score0.02653EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2009/10/11 10:30 p.m.17 views

CVE-2009-3662

FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service server hang via a large number of crafted NOOP commands...

5CVSS6.5AI score0.02653EPSS
SaveExploits2References3
Rows per page
Query Builder