Lucene search
K

5150 matches found

AlpineLinux
AlpineLinux
added 2017/04/22 10:0 p.m.31 views

CVE-2017-8054

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted PDF document...

5.5CVSS6.5AI score0.00402EPSS
Exploits1
Prion
Prion
added 2017/04/22 9:59 p.m.18 views

Design/Logic Flaw

PoDoFo 0.9.5 allows denial of service infinite recursion and stack consumption via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure PdfParser.cpp...

4.3CVSS5.3AI score0.00201EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2017/04/22 9:59 p.m.16 views

CVE-2017-8053

PoDoFo 0.9.5 allows denial of service infinite recursion and stack consumption via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure PdfParser.cpp...

5.5CVSS5.3AI score0.00201EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2017/04/19 9:48 a.m.28 views

CVE-2017-6181

An unbounded recursion flaw was found in the way Ruby handled regular expressions. A specially crafted regular expression could be used by an attacker to crash an Ruby application processing such crafted input...

7.5CVSS3.1AI score0.00696EPSS
Exploits0References1
CNVD
CNVD
added 2017/04/11 12:0 a.m.2 views

Nextcloud Denial of Service Vulnerability

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. A denial of service vulnerability exists in Nextcloud Server versions prior to 9.0.55 and prior to 10.0.2. An attacker...

6.5CVSS6.6AI score0.00612EPSS
Exploits0References1
OSV
OSV
added 2017/04/10 2:59 p.m.1 views

DEBIAN-CVE-2017-7618

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggering EBUSY on a full queue...

7.5CVSS6AI score0.00311EPSS
Exploits0References1
Prion
Prion
added 2017/04/10 2:59 p.m.24 views

Code injection

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggering EBUSY on a full queue...

7.8CVSS6.7AI score0.00311EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/04/10 2:59 p.m.8 views

CVE-2017-7618

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggering EBUSY on a full queue...

7.5CVSS6.7AI score
Exploits0References3
Debian CVE
Debian CVE
added 2017/04/10 2:0 p.m.23 views

CVE-2017-7618

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggering EBUSY on a full queue...

7.8CVSS6AI score0.00311EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2017/04/09 12:0 a.m.4 views

PT-2017-2371 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.10.9 Description: The issue is related to the crypto/ahash.c component in the Linux kernel, which can lead to a denial of service due to infinite recursion. This occurs when an attacker triggers EBUSY on a full...

10CVSS7.2AI score0.87EPSS
Exploits56References556
NVD
NVD
added 2017/04/05 8:59 p.m.14 views

CVE-2017-0886

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...

6.5CVSS6.3AI score0.00612EPSS
Exploits0References2
OSV
OSV
added 2017/04/05 8:59 p.m.31 views

CVE-2017-0886

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...

6.5CVSS6.5AI score
Exploits0References2
Prion
Prion
added 2017/04/05 8:59 p.m.15 views

Denial of service

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...

4CVSS6.3AI score0.00612EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2017/04/05 12:0 a.m.2 views

PT-2017-10687 · Nextcloud · Nextcloud Server

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 9.0.55 Nextcloud Server versions prior to 10.0.2 Description: The issue allows an authenticated adversary to trigger an endless recursion in the application, leading to a potential Denial of Service attack d...

6.5CVSS6.2AI score0.00612EPSS
Exploits0References5
OSV
OSV
added 2017/04/04 6:44 a.m.4 views

MGASA-2017-0103 Updated mxml packages fix security vulnerability

Two stack exhaustion issues based on uncontrolled recursion were found in mxml. A maliciously crafted xml file can cause the application to crash. Recursion using mxmlDelete at mxml-node.c:217 reproducer is stack-exhaustion-1.xml CVE-2016-4570. Recursion using mxmlwritenode at mxml-file.c:2739...

7.1CVSS5.8AI score0.00333EPSS
Exploits0References5
Mageia
Mageia
added 2017/04/04 6:44 a.m.22 views

Updated mxml packages fix security vulnerability

Two stack exhaustion issues based on uncontrolled recursion were found in mxml. A maliciously crafted xml file can cause the application to crash. Recursion using mxmlDelete at mxml-node.c:217 reproducer is stack-exhaustion-1.xml CVE-2016-4570. Recursion using mxmlwritenode at mxml-file.c:2739...

7.1CVSS2.6AI score0.00333EPSS
Exploits0References4
NVD
NVD
added 2017/04/03 5:59 a.m.16 views

CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

7.5CVSS7.2AI score0.00696EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2017/04/03 5:59 a.m.20 views

CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

7.5CVSS7.1AI score0.00696EPSS
Exploits0References3
CVE
CVE
added 2017/04/03 5:44 a.m.48 views

CVE-2017-6181

The CVE-2017-6181 entry corresponds to an unbounded recursion flaw in the Onigmo (Oniguruma-mod) regular expression library’s parse_char_class function (regparse.c) used by Ruby 2.4.0. A crafted regular expression can cause a remote attacker to trigger deep recursion and a potential application c...

7.5CVSS7.1AI score0.00696EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/04/03 5:44 a.m.22 views

CVE-2017-6181

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

7.2AI score0.00696EPSS
Exploits0References3
Rows per page
Query Builder