Lucene search
K

5228 matches found

Veracode
Veracode
added 2020/09/21 6:21 a.m.31 views

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils. There is a stack consumption vulnerability resulting from infinite recursion in the functions dname, dencoding, and dlocalname in cp-demangle.c. Remot...

5.5CVSS4.5AI score0.00562EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2020/09/21 6:21 a.m.26 views

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists through a stack consumption vulnerability caused by an infinite recursion in the functions nextistypequal and cplusdemangletype in cp-demangle.c...

5.5CVSS4.1AI score0.00333EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2020/09/21 6:21 a.m.23 views

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A Stack Exhaustion in debugwritetype in debug.cdue to a DEBUGKINDINDIRECT infinite recursion allows an attacker to crash the application...

5.1AI score
Exploits0References7Affected Software1
NVD
NVD
added 2020/09/09 9:15 p.m.21 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS0.00449EPSS
Exploits1References9
OSV
OSV
added 2020/09/09 9:15 p.m.3 views

AZL-7270 CVE-2020-25219 affecting package libproxy for versions less than 0.4.15-20

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.1AI score0.00449EPSS
Exploits1References1
OSV
OSV
added 2020/09/09 9:15 p.m.18 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.4AI score
Exploits0References9
UbuntuCve
UbuntuCve
added 2020/09/09 9:15 p.m.19 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.1AI score0.00449EPSS
Exploits1References3
Prion
Prion
added 2020/09/09 9:15 p.m.18 views

Stack overflow

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

5CVSS7.2AI score0.00449EPSS
Exploits1References9Affected Software5
AlpineLinux
AlpineLinux
added 2020/09/09 8:30 p.m.36 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.5AI score0.00449EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2020/09/08 10:6 a.m.2 views

oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c

Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c...

7.5CVSS7.3AI score0.00214EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2020/09/04 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for libcroco (EulerOS-SA-2020-1922)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.1AI score0.04749EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/08/31 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for libcroco (EulerOS-SA-2020-1909)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.1AI score0.04749EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/08/28 12:0 a.m.29 views

EulerOS Virtualization for ARM 64 3.0.6.0 : libcroco (EulerOS-SA-2020-1909)

According to the version of the libcroco package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack...

7.1CVSS6.5AI score0.04749EPSS
Exploits1References2
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:0 a.m.3 views

find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

...

6.5CVSS7.5AI score0.01079EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 12:0 a.m.2 views

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.

...

6CVSS7AI score0.00074EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2020/08/18 12:0 a.m.2 views

In the GNU C Library (aka glibc or libc6) through 2.29 check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

...

7.5CVSS7.7AI score0.01305EPSS
Exploits1
NVD
NVD
added 2020/08/12 4:15 p.m.16 views

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS7.2AI score0.19614EPSS
Exploits2References12
OSV
OSV
added 2020/08/12 4:15 p.m.1 views

DEBIAN-CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS7AI score0.19614EPSS
Exploits2References1
OSV
OSV
added 2020/08/12 4:15 p.m.24 views

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS5.3AI score
Exploits0References12
EUVD
EUVD
added 2020/08/12 3:7 p.m.2 views

EUVD-2020-4416

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS6.2AI score0.19614EPSS
Exploits2References21
Rows per page
Query Builder