Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists when parsing a malicious regular expression...

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

Denial Of Service (DoS)

PCRE is vulneraable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

Denial Of Service (DoS)

pcre is vulnerable to denial of service DoS. The vulnerability exists as remote attackers can supply malicious regular expression to cause DoS attacks...

Denial Of Service (DoS)

Tcl Tool Command Language provides a powerful platform for creating integration applications that tie together diverse applications, protocols, devices, and frameworks. When paired with the Tk toolkit, Tcl provides a fast and powerful way to create cross-platform GUI applications. Two denial of...

Stack-based Buffer Overflow

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the Name Server Caching Daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. It was found that...

PT-2019-12298 · Artifex · Artifex Mujs

Name of the Vulnerable Software and Affected Versions: Artifex MuJS version 1.0.5 Description: An issue was discovered in Artifex MuJS. It has unlimited recursion because the match function in regexp.c lacks a depth check. Recommendations: For Artifex MuJS version 1.0.5, consider applying a patch...

Regular Expression Denial Of Service (ReDoS)

marked is vulnerable to regular expression denial of service ReDoS attacks. The vulnerability exists as the inline.text regex could require a quadratic time to complete a scan, causing ReDoS...

GNU C Library Heap Buffer Overflow DoS

The vulnerability in the proceednextnode function in posix/regexec.c in the GNU C library is related to the ability to read buffers outside the memory boundary, caused by comparing with a regular expression that does not depend on registers. Exploiting this vulnerability can allow an attacker to...

Regular Expression Denial of Service

Overview Versions of highcharts prior to 6.1.0 are vulnerable to Regular Expression Denial of Service ReDoS. Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service. Recommendation Upgra...

SUSE SLES11 Security Update : ed (SUSE-SU-2019:14005-1)

This update for ed fixes the following security issues : CVE-2017-5357: An invalid free in the regular expression handling of the 'ed' command processing could allow local users to crash ed. bsc1019807 Note that Tenable Network Security has extracted the preceding description block directly from...

The version of moment.js used in Jira Service Desk was vulnerable to a regular expression denial of service

The version of moment.js used in Jira Service Desk Server before version 4.0.0 allows remote attackers to cause a denial of service in user's browsers via a regular expression denial of service. For additional details...

The version of moment.js used in Jira was vulnerable to a regular expression denial of service

The version of moment.js used in in Jira before version 7.12.3, from version 7.13.0 before version 7.13.1 and before version 8.0.0 allows remote attackers to cause a denial of service in user's browsers via a regular expression denial of service. For additional details...

The version of moment.js used in Jira was vulnerable to a regular expression denial of service

The version of moment.js used in in Jira before version 7.12.3, from version 7.13.0 before version 7.13.1 and before version 8.0.0 allows remote attackers to cause a denial of service in user's browsers via a regular expression denial of service. For additional details...

Important: perl

Issue Overview: Perl has a buffer overflow via a crafted regular expression that triggers invalid write operations. CVE-2018-18311 Affected Packages: perl Issue Correction: Run yum update perl or yum update --advisory ALAS-2019-1180 to update your system. New Packages: i686: ...