1985 matches found
AZL-31639 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-34015 CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-34544 CVE-2023-39325 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-35121 CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-37478 CVE-2023-39325 affecting package golang for versions less than 1.21.6-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-39652 CVE-2023-39325 affecting package kata-containers for versions less than 3.2.0.azl4-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
Microsoft patches 12 critical vulnerabilities, nine of which are in Layer 2 Tunneling Protocol
Microsoft disclosed 104 vulnerabilities in its extensive range of software and services, the most in a single Patch Tuesday since July. What is most notable is that this batch of vulnerabilities includes 12 that are considered "critical," nine of which are remote code execution vulnerabilities in...
SUSE CVE-2023-39325
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
Windows Message Queuing Code Execution
The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-36697
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36606
Microsoft Message Queuing MSMQ Denial of Service Vulnerability...
CVE-2023-36697
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36606
Microsoft Message Queuing MSMQ Denial of Service Vulnerability...
CVE-2023-36579
Microsoft Message Queuing MSMQ Denial of Service Vulnerability...
CVE-2023-36583
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36591
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36590
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36581
Microsoft Message Queuing MSMQ Denial of Service Vulnerability...