5755 matches found
CVE-2022-30635
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures...
CVE-2022-30635 Stack exhaustion when decoding certain messages in encoding/gob
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures...
CVE-2022-30632
Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators...
CVE-2022-30632
CVE-2022-30632 affects the Go standard library (path/filepath) where calling Glob on a path that contains a large number of path separators can cause a panic from stack exhaustion, impacting availability. Affected component: Go’s path/filepath Glob implementation (pre-Go 1.17.12 and pre-Go 1.18.4...
CVE-2022-30632
Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators...
CVE-2022-30632 Stack exhaustion on crafted paths in path/filepath
Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators...
CVE-2022-30632 Stack exhaustion on crafted paths in path/filepath
Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to an uncontrolled recursion causing the system to exhaust the memory and crash...
CVE-2022-28131 Stack exhaustion from deeply nested XML documents in encoding/xml
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document...
CVE-2022-28131
CVE-2022-28131: Uncontrolled recursion in Decoder.Skip in encoding/xml can panic due to stack exhaustion when parsing deeply nested XML. Affected: Go's encoding/xml package. Root cause: recursion while skipping nested XML elements. Impact: potential denial of service via panic/availability loss. ...
CVE-2022-28131
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document...
CVE-2022-28131 Stack exhaustion from deeply nested XML documents in encoding/xml
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document...
Amazon Linux AMI : vim (ALAS-2022-1628)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1628 advisory. Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...
GHSA-H3QM-JRRF-CGJ3 graphql-go has infinite recursion in the type definition parser
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
graphql-go has infinite recursion in the type definition parser
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
UBUNTU-CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
