Lucene search
+L

5737 matches found

NVD
NVD
added 2021/07/09 12:15 p.m.22 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS0.02082EPSS
SaveExploits0References3
OSV
OSV
added 2021/07/09 12:15 p.m.26 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS6.9AI score
SaveExploits0References3
CVE
CVE
added 2021/07/09 11:2 a.m.59 views

CVE-2021-36154

CVE-2021-36154 affects gRPC Swift up to version 1.1.1, where HTTP2ToRawGRPCServerCodec can mishandle multiple small messages in a single HTTP/2 frame, causing uncontrolled recursion and denial of service. Public advisories (GHSA-4RHQ-VQ24-88GW and OSV/Red Hat entries) confirm the issue and state ...

7.5CVSS7.4AI score0.02082EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:0 a.m.39 views

EulerOS Virtualization 3.0.2.2 : krb5 (EulerOS-SA-2021-2141)

According to the version of the krb5 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because...

7.5CVSS7.5AI score0.04417EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:0 a.m.33 views

EulerOS Virtualization 3.0.2.2 : libcroco (EulerOS-SA-2021-2143)

According to the version of the libcroco package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption.CVE-2020-12825...

7.1CVSS6.6AI score0.02319EPSS
SaveExploits1References2
OSV
OSV
added 2021/07/03 11:3 a.m.4 views

OESA-2021-1251 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: An unlimited recursion in DxeCore in EDK II.CVE-2021-28210...

7.8CVSS7AI score0.00399EPSS
SaveExploits1References2
Rosalinux
Rosalinux
added 2021/07/02 5:32 p.m.35 views

Advisory ROSA-SA-2021-1926

Software: nasm 2.10.07 OS: Cobalt 7.9 CVE-ID: CVE-2018-1000667 CVE-Crit: MEDIUM CVE-DESC: NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains nasm memory corruption crash while processing a created file due to assemblyfile inname, independentptr function at asm / nasm.c: 482...

7.8CVSS7.1AI score0.05166EPSS
SaveExploits9
Rosalinux
Rosalinux
added 2021/07/02 5:16 p.m.42 views

Advisory ROSA-SA-2021-1885

Software: libproxy 0.4.11 OS: Cobalt 7.9 CVE-ID: CVE-2020-25219 CVE-Crit: HIGH CVE-DESC: url :: recvline in url.cpp in libproxy 0.4.x to 0.4.15 allows a remote HTTP server to run uncontrolled recursion through a response consisting of an infinite stream with no newline character. This results in...

9.8CVSS7.5AI score0.04284EPSS
SaveExploits1
Rosalinux
Rosalinux
added 2021/07/02 5:11 p.m.45 views

Advisory ROSA-SA-2021-1865

Software: libcroco 0.6.12 OS: Cobalt 7.9 CVE-ID: CVE-2017-7960 CVE-Crit: MEDIUM CVE-DESC: The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer re-read via a crafted CSS file. CVE-STATUS: default CVE-REV:...

7.1CVSS7.1AI score0.12996EPSS
SaveExploits7
Tenable Nessus
Tenable Nessus
added 2021/07/02 12:0 a.m.30 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libproxy (EulerOS-SA-2021-2073)

According to the version of the libproxy package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion...

7.5CVSS7.2AI score0.04284EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/06/29 5:31 p.m.29 views

Updated re2c package fixes a security vulnerability

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags CVE-2018-21232...

5.5CVSS4.9AI score0.01432EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/06/28 12:0 a.m.38 views

SUSE SLES15 Security Update : ovmf (SUSE-SU-2021:2161-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2161-1 advisory. - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with...

7.8CVSS6.9AI score0.00399EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
added 2021/06/28 12:0 a.m.29 views

SUSE SLES12 Security Update : ovmf (SUSE-SU-2021:2117-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2117-1 advisory. - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with...

7.8CVSS7AI score0.00399EPSS
SaveExploits2References11
OSV
OSV
added 2021/06/25 7:40 a.m.11 views

SUSE-SU-2021:2161-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579...

7.8CVSS7.4AI score0.00399EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2021/06/25 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2021:2161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.00399EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.7 views

The vulnerability of Xen hypervisors, caused by uncontrolled recursion, allows attackers to trigger an emergency shutdown of the application.

The vulnerability of the Xen hypervisor is caused by an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally...

5.5CVSS6.8AI score0.00438EPSS
SaveExploits0References7Affected Software4
OSV
OSV
added 2021/06/22 11:56 a.m.9 views

SUSE-SU-2021:2117-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579 - CVE-2019-14584: ovmf,shi...

7.8CVSS7.5AI score0.00399EPSS
SaveExploits2References8
NVD
NVD
added 2021/06/11 4:15 p.m.22 views

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

7.8CVSS0.00399EPSS
SaveExploits1References1
OSV
OSV
added 2021/06/11 4:15 p.m.3 views

DEBIAN-CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

7.8CVSS6.1AI score0.00399EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/06/11 4:15 p.m.5 views

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

7.8CVSS6.2AI score0.00399EPSS
SaveExploits1References2
Rows per page
Query Builder