Lucene search
+L

1107 matches found

NVD
NVD
added 2018/10/04 11:29 p.m.22 views

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.1AI score0.01291EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2018/10/04 11:29 p.m.33 views

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.8AI score0.01291EPSS
SaveExploits0References4
OSV
OSV
added 2018/10/04 11:29 p.m.4 views

DEBIAN-CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.3AI score0.01291EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/04 11:29 p.m.5 views

UBUNTU-CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.7AI score0.01291EPSS
SaveExploits0References5
CVE
CVE
added 2018/10/04 11:0 p.m.170 views

CVE-2018-17985

CVE-2018-17985 is a stack consumption vulnerability in GNU Binutils (libiberty), observed in cp-demangle.c with cplus_demangle_type performing recursive calls when many 'P' characters occur. The Astra Linux advisory mirrors this description, noting the issue in Binutils 2.31. The provided documen...

5.5CVSS6AI score0.01291EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2018/10/04 11:0 p.m.36 views

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.3AI score0.01291EPSS
SaveExploits0
OSV
OSV
added 2018/09/28 9:29 a.m.5 views

PYSEC-2018-139

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.5CVSS7AI score
SaveExploits0References6
Prion
Prion
added 2018/09/28 9:29 a.m.24 views

Design/Logic Flaw

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

4.3CVSS6.8AI score0.0235EPSS
SaveExploits1References6Affected Software6
NVD
NVD
added 2018/09/28 9:29 a.m.26 views

CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.5CVSS6.4AI score0.0235EPSS
SaveExploits1References6
CVE
CVE
added 2018/09/28 12:0 a.m.243 views

CVE-2018-17581

CVE-2018-17581 is associated with Exiv2 0.26. The vulnerability arises from excessive stack consumption caused by a recursive function in CiffDirectory::readDirectory() implemented in crwimage_int.cpp, leading to a denial of service. The connected documents corroborate a DoS impact for this CVE, ...

6.5CVSS6.6AI score0.0235EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2018/09/28 12:0 a.m.25 views

CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.8AI score0.0235EPSS
SaveExploits1References6
NVD
NVD
added 2018/09/24 10:29 p.m.20 views

CVE-2018-17281

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

7.5CVSS7.4AI score0.53381EPSS
SaveExploits0References10
OSV
OSV
added 2018/09/24 10:29 p.m.23 views

CVE-2018-17281

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

7.5CVSS7.4AI score
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2018/09/24 10:29 p.m.31 views

CVE-2018-17281

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

7.5CVSS7.1AI score0.53381EPSS
SaveExploits0References8
Prion
Prion
added 2018/09/24 10:29 p.m.19 views

Stack overflow

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

5CVSS7.3AI score0.53381EPSS
SaveExploits0References10Affected Software3
Cvelist
Cvelist
added 2018/09/24 10:0 p.m.30 views

CVE-2018-17281

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

7.4AI score0.53381EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2018/09/24 10:0 p.m.32 views

CVE-2018-17281

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

7.5CVSS7.5AI score0.53381EPSS
SaveExploits0
CVE
CVE
added 2018/09/24 10:0 p.m.104 views

CVE-2018-17281

CVE-2018-17281 affects the Asterisk res_http_websocket.so module and allows an attacker to crash Asterisk by sending a crafted HTTP Upgrade request to websocket. Affected: Asterisk up to 13.23.0, 14.7.x up to 14.7.7, 15.x up to 15.6.0, and Certified Asterisk up to 13.21-cert2. Consequences: denia...

7.5CVSS7.3AI score0.53381EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2018/09/03 12:29 a.m.7 views

CVE-2018-16369

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service stack consumption via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453...

5.5CVSS5.3AI score
SaveExploits0References1
Prion
Prion
added 2018/09/03 12:29 a.m.21 views

Code injection

XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service stack consumption via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453...

4.3CVSS5.2AI score0.01618EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder