5702 matches found
UBUNTU-CVE-2019-16163
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c...
CVE-2019-16163
CVE-2019-16163 affects Oniguruma before 6.9.3, causing stack exhaustion (regcomp.c) due to recursion in regparse.c and possible crash. Concrete details appear in IBM/QRadar and related bulletins; base scores listed as 3.3 (NVD) and 7.5/ HIGH in some vectors depending on source. Remediation: upgra...
CVE-2019-16163
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c...
CVE-2019-16163
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c...
bsdcpio, bsdtar, libarchive security update
CentOS Errata and Security Advisory CESA-2019:2298 An update for libarchive is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
Scientific Linux Security Update : poppler on SL7.x x86_64 (20190806)
Security Fixes : - poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc CVE-2019-7310 - poppler: heap-based buffer overflow in function ImageStream::getLine in Stream.cc CVE-2019-9200 - poppler: infinite recursion in Parser::getObj function in Parser.cc CVE-2018-16646 - poppler: memo...
Scientific Linux Security Update : Xorg on SL7.x x86_64 (20190806)
Security Fixes : - libX11: Crash on invalid reply in XListExtensions in ListExt.c CVE-2018-14598 - libX11: Off-by-one error in XListExtensions in ListExt.c CVE-2018-14599 - libX11: Out of Bounds write in XListExtensions in ListExt.c CVE-2018-14600 - libxkbcommon: Invalid free in...
CVE-2019-15542
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...
CVE-2019-15542
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...
CVE-2019-15542
An issue in the ammonia crate for Rust (before 2.1.0) causes uncontrolled recursion during HTML DOM tree serialization in the affected component. The documents provide the vulnerability description but do not specify exploit vectors, practical impact beyond potential recursion, or concrete remedi...
CVE-2019-15542
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...
CVE-2018-20994
An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled...
CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...
CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...
UBUNTU-CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...
Information disclosure
An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled...
Deserialization of untrusted data
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...
CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...
CVE-2018-20994
CVE-2018-20994 affects the Rust crate trust-dns-proto prior to 0.5.0-alpha.3. The issue is infinite recursion/stack overflow caused by incorrect handling of DNS message compression (RFC1035 section 4.1.4). Connected advisories (e.g., RUSTSEC-2018-0007, GHSA-369H-PJR2-6WRH, Red Hat RH/CVE-2018-209...