Lucene search
+L

81 matches found

Veracode
Veracode
•added 2020/08/13 4:32 a.m.•56 views

Denial Of Service (DoS)

github.com/golang/go is vulnerable to denial of service. An infinite read loop in ReadUvarint and ReadVarint allows an attacker to create a denial of service condition via malicious input...

7.5CVSS7AI score0.0473EPSS
SaveExploits0References23Affected Software92
CNVD
CNVD
•added 2020/08/10 12:00 a.m.•8 views

Google Go Denial of Service Vulnerability (CNVD-2020-46848)

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A security vulnerability exists in Google Go versions prior to 1.13.15 and 14.x prior to 1.14.7. An attacker can exploit the vulnerability with invalid input to cause an infinite...

7.5CVSS6.9AI score0.0473EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/06 6:15 p.m.•25 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7.6AI score0.0473EPSS
SaveExploits0References15
OSV
OSV
•added 2020/08/06 6:15 p.m.•12 views

AZL-79098 CVE-2020-16845 affecting package golang 1.26.7-1

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7AI score0.0473EPSS
SaveExploits0References1
OSV
OSV
•added 2020/08/06 6:15 p.m.•4 views

AZL-98940 CVE-2020-16845 affecting package golang 1.27.1-1

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7AI score0.0473EPSS
SaveExploits0References1
OSV
OSV
•added 2020/08/06 6:15 p.m.•41 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.8AI score
SaveExploits0References15
OSV
OSV
•added 2020/08/06 6:15 p.m.•13 views

UBUNTU-CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7AI score0.0473EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2020/08/06 6:15 p.m.•46 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7AI score0.0473EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/08/06 5:03 p.m.•40 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.8AI score0.0473EPSS
SaveExploits0References15
AlpineLinux
AlpineLinux
•added 2020/08/06 5:03 p.m.•67 views

CVE-2020-16845

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7AI score0.0473EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/08/06 5:03 p.m.•41 views

CVE-2020-16845

Removed by vendor...

7.5CVSS7AI score0.0473EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/06 12:00 a.m.•3 views

CVE-2020-16845: Loop with Unreachable Exit Condition

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS7AI score0.0473EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/03/24 12:00 a.m.•9 views

PT-2020-2816 · Videolabs +1 · Libmicrodns +1

Name of the Vulnerable Software and Affected Versions: Videolabs libmicrodns version 0.1.0 Description: An exploitable denial-of-service issue exists in the resource allocation handling of Videolabs libmicrodns. When encountering errors while parsing mDNS messages, some allocated data is not free...

9.8CVSS8.6AI score0.03727EPSS
SaveExploits8References53
Tenable Nessus
Tenable Nessus
•added 2019/04/04 12:00 a.m.•31 views

EulerOS Virtualization 2.5.3 : tar (EulerOS-SA-2019-1262)

According to the version of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of...

4.7CVSS6.3AI score0.00526EPSS
SaveExploits1References2
Mageia
Mageia
•added 2019/01/11 9:07 p.m.•65 views

GNU tar has been updated to fix CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS3.6AI score0.00526EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/12/27 12:00 a.m.•14 views

GNU tar Denial of Service Vulnerability

GNU Tar is a set of tools developed by the GNU Project for creating files in tar format. A security vulnerability exists in GNU Tar versions 1.30 and earlier, which stems from the program's failure to properly handle file shrinking. A local attacker can exploit this vulnerability by modifying the...

4.7CVSS6.8AI score0.00526EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/26 6:29 p.m.•10 views

UBUNTU-CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS6.7AI score0.00526EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
•added 2018/12/26 6:00 p.m.•69 views

CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS4.8AI score0.00526EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/26 12:00 a.m.•3 views

CVE-2018-20482: Loop with Unreachable Exit Condition

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS5.8AI score0.00526EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/06/12 12:00 a.m.•17 views

PT-2018-11059 · Sangoma · Asterisk Open Source

Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 15.x before 15.4.1 Description: An issue was discovered in Asterisk Open Source. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk get...

6.8CVSS6.6AI score0.06698EPSS
SaveExploits1References7
Rows per page
Query Builder