Lucene search
+L

11 matches found

Snyk
Snyk
•added 2026/06/08 10:59 p.m.•24 views

Improper Verification of Source of a Communication Channel

Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel due to improper validation in the validateToken function. An attacker can cause the server to treat unvalidated client addresses as validated by supplying any non-empty token...

8.7CVSS5.8AI score0.00191EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-9052

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00579EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/04/02 7:36 p.m.•29 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS7.2AI score0.00579EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/03/31 9:47 p.m.•10 views

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the codec process. An attacker can cause a considerable CPU load on the server by initiating connections with colliding Source Connection IDs SCIDs. Remediation Upgrade...

6.9CVSS6.9AI score0.00579EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/31 7:15 p.m.•46 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.00579EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/31 6:43 p.m.•23 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS6.6AI score
SaveExploits0References5
CVE
CVE
•added 2025/03/31 6:43 p.m.•102 views

CVE-2025-29908

CVE-2025-29908 affects the Netty QUIC codec (netty-incubator-codec-quic) which uses quiche. The issue is a hash collision in the hash map that manages connections, allowing a remote attacker to induce a Hash DoS by initiating connections with colliding Source Connection IDs (SCIDs), causing consi...

5.3CVSS5.2AI score0.00579EPSS
SaveExploits0References3
Mend
Mend
•added 2025/03/31 6:43 p.m.•9 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

6.9CVSS0.00579EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/03/31 6:43 p.m.•10 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS7.1AI score0.00579EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•6 views

CVE-2025-29908: Inefficient Algorithmic Complexity

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS5.9AI score0.00579EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•6 views

PT-2025-13599

Name of the Vulnerable Software and Affected Versions Netty QUIC codec versions prior to 0.0.71.Final Description A hash collision vulnerability in the Netty QUIC codec allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source Connectio...

5.3CVSS0.00579EPSS
SaveExploits0References13
Rows per page
Query Builder