4558 matches found
GHSA-7WRV-6H42-W54F PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Summary A player sending a packet can cause the server to crash by providing incorrect sign data in NBT in BlockActorDataPacket. Details This vulnerability was discovered using the BlockActorDataPacket, but other packets may also be affected. The player would seem to just need to send an NBT with...
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Summary A player sending a packet can cause the server to crash by providing incorrect sign data in NBT in BlockActorDataPacket. Details This vulnerability was discovered using the BlockActorDataPacket, but other packets may also be affected. The player would seem to just need to send an NBT with...
PT-2023-32994 · Unknown · Pocketmine
Name of the Vulnerable Software and Affected Versions: PocketMine versions prior to 4.22.3 PocketMine versions prior to 5.2.1 Description: A player can cause the server to crash by sending a packet with incorrect sign data in NBT in the BlockActorDataPacket. This can be achieved by sending an NBT...
DEBIAN-CVE-2023-29451
Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy...
CVE-2022-31810
A vulnerability has been identified in SiPass integrated All versions V2.90.3.8. Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated remote attacker to crash...
Siemens SiPass Integrated 缓冲区错误漏洞
Siemens SiPass Integrated is an access control system from Siemens, Germany. The Siemens SiPass Integrated stack overflow vulnerability, which is caused due to an affected server application not properly checking the size of packets received to configure client logins, can be exploited by an...
Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled
...
SUSE CVE-2023-33460
There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...
Low: yajl
Issue Overview: No CVE associated with this advisory Affected Packages: yajl Issue Correction: Run dnf update yajl --releasever 2023.1.20230628 or dnf update --advisory ALAS2023-2023-214 --releasever 2023.1.20230628 to update your system. More information on how to update your system can be found...
Dos via Document Comments
Description An attacker can abuse the document comment functionality, handled by the /api/comments.create API endpoint, since there is not size check or validation of the comment contents, which allows an attacker to send a comment with almost an unlimited number of characters1MB max POST size...
PT-2023-25384 · Unknown · Fastasyncworldedit
Name of the Vulnerable Software and Affected Versions: FastAsyncWorldEdit versions prior to 2.6.3 Description: This issue enables an attacker to select a region with the Infinity keyword and execute any operation, potentially bringing the server down. The attacker can exploit this by selecting a...
CVE-2023-30082
CVE-2023-30082 affects the osTicket application. The available documents describe a denial-of-service vulnerability where supplying an unusually lengthy password (more than 10,000,000 characters) can cause the server to become unavailable or unresponsive by consuming high CPU and memory. The impa...
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
...
Denial of service via HTTP/2 HEADERS frames padding
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.2. It is fixed in 1.20.0 and later releases. This vulnerability is caused by a logica...
golang: crash in a golang.org/x/crypto/ssh server
A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability...
AZL-27143 CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19
There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...
AZL-35363 CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19
There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...
CVE-2023-33460
There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...
