Lucene search
K

1103 matches found

UbuntuCve
UbuntuCve
added 2019/09/30 12:0 a.m.23 views

CVE-2018-16300

The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgpattrprint because of unlimited recursion...

7.5CVSS6.4AI score0.00948EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/09/17 12:0 a.m.45 views

EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1842)

According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder...

7.5CVSS7.9AI score0.04079EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2019/09/16 12:0 a.m.48 views

Oracle Linux 8 : poppler (ELSA-2019-2713)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2713 advisory. 0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlic...

9.8CVSS7AI score0.03439EPSS
Exploits8References13
Tenable Nessus
Tenable Nessus
added 2019/09/16 12:0 a.m.50 views

RHEL 8 : poppler (RHSA-2019:2713)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2713 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: heap-based buffer...

9.8CVSS7.2AI score0.03439EPSS
Exploits8References27
RedHat Linux
RedHat Linux
added 2019/09/12 12:17 p.m.2 views

poppler: stack consumption in function Dict::find() in Dict.cc

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

6.5CVSS5.7AI score0.0063EPSS
Exploits1References4
Mageia
Mageia
added 2019/09/06 9:9 p.m.35 views

Updated poppler packages fix security vulnerabilities

Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...

9.8CVSS0.8AI score0.02178EPSS
Exploits5References4
OSV
OSV
added 2019/09/06 9:9 p.m.10 views

MGASA-2019-0244 Updated poppler packages fix security vulnerabilities

Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...

9.8CVSS7AI score0.02178EPSS
Exploits7References5
Github Security Blog
Github Security Blog
added 2019/08/23 12:4 a.m.24 views

Uncontrolled Resource Consumption in MetadataExtractor

MetadataExtractor 2.1.0 allows stack consumption...

7.8CVSS3.8AI score0.00296EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/07/26 12:0 a.m.52 views

Poppler 0.74 Multiple Vulnerabilities

The version of Poppler installed on the remote host is 0.74. It is, therefore, affected by multiple vulnerabilities: - An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file ...

8.8CVSS7.1AI score0.0064EPSS
Exploits2References4
NVD
NVD
added 2019/07/25 5:15 a.m.8 views

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

7.8CVSS6.1AI score0.00296EPSS
Exploits0References2
OSV
OSV
added 2019/07/25 5:15 a.m.11 views

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

7.5CVSS6.8AI score
Exploits0References2
Prion
Prion
added 2019/07/25 5:15 a.m.16 views

Stack overflow

MetadataExtractor 2.1.0 allows stack consumption...

7.8CVSS7.5AI score0.00296EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/07/25 4:35 a.m.11 views

CVE-2019-14262

MetadataExtractor 2.1.0 allows stack consumption...

6.4AI score0.00296EPSS
Exploits0References2
CVE
CVE
added 2019/07/25 4:35 a.m.187 views

CVE-2019-14262

CVE-2019-14262 concerns MetadataExtractor 2.1.0, vulnerable to a stack-based buffer overflow caused by improper bounds checking. A crafted input (e.g., a specially crafted file) could overflow a stack and allow remote code execution on the target system. The related advisories cite a high impact ...

7.8CVSS7.4AI score0.00296EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/07/25 12:0 a.m.2 views

MetadataExtractor Stack Overflow Vulnerability

MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. A security vulnerability exists in MetadataExtractor version 2.1.0. An attacker can exploit this vulnerability to cause a denial of service stack consumption...

7.8CVSS6.7AI score0.00296EPSS
Exploits0References1
NVD
NVD
added 2019/07/01 3:15 p.m.11 views

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

7.8CVSS7.5AI score0.00296EPSS
Exploits1References1
OSV
OSV
added 2019/07/01 3:15 p.m.1 views

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

7.5CVSS7.1AI score
Exploits0References1
Prion
Prion
added 2019/07/01 3:15 p.m.15 views

Design/Logic Flaw

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

7.8CVSS7.5AI score0.00296EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/07/01 2:48 p.m.51 views

CVE-2019-13129

Summary: CVE-2019-13129 affects the Motorola CX2L MWR04L router (version 1.01). The issue is a stack consumption/infinite recursion in the scopd process reachable over TCP port 8010 and UDP port 8080, caused by improper length handling in snprintf. This can lead to denial of service through resou...

7.8CVSS7.5AI score0.00296EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/07/01 2:48 p.m.12 views

CVE-2019-13129

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...

7.6AI score0.00296EPSS
Exploits1References1
Rows per page
Query Builder