361 matches found
The vulnerabilities of the functions xmlParserEntityCheck and xmlParseAttValueComplex in the libxml2 library allow a hacker to trigger a service failure.
The vulnerabilities of the xmlParserEntityCheck and xmlParseAttValueComplex functions in the parser.c file of the libxml2 library are caused by errors in tracking the depth of recursion. Exploiting these vulnerabilities can allow an attacker, operating remotely, to cause a service failure using a...
RUSTSEC-2018-0006 Uncontrolled recursion leads to abort in deserialization
Affected versions of this crate did not prevent deep recursion while deserializing data structures. This allows an attacker to make a YAML file with deeply nested structures that causes an abort while deserializing it. The flaw was corrected by checking the recursion depth. Note: clap 2.33 is not...
CVE-2018-13795
Gravity before 0.5.1 does not support a maximum recursion depth...
Design/Logic Flaw
Gravity before 0.5.1 does not support a maximum recursion depth...
CVE-2018-13795
Gravity before 0.5.1 does not support a maximum recursion depth...
CVE-2018-13795
CVE-2018-13795 affects Gravity prior to 0.5.1. The issue is described as: Gravity before 0.5.1 does not support a maximum recursion depth. Connected sources list Gravity-specific references with this description; no additional technical details (root cause, affected versions beyond the pre-0.5.1 ...
CVE-2018-13795: Improper Input Validation
Gravity before 0.5.1 does not support a maximum recursion depth...
CVE-2018-9256
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth...
ALPINE-CVE-2018-9256
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth...
ALPINE-CVE-2018-9262
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...
DEBIAN-CVE-2018-9262
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...
UBUNTU-CVE-2018-9259
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...
Design/Logic Flaw
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...
DEBIAN-CVE-2018-9256
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth...
DEBIAN-CVE-2018-9259
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...
Design/Logic Flaw
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...
CVE-2018-9262
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...
CVE-2018-9259: Improper Input Validation
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...
