Lucene search
+L

395 matches found

OSV
OSV
added 2023/05/26 9:15 p.m.16 views

AZL-26793 CVE-2023-28320 affecting package curl for versions less than 8.2.1-1

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.8AI score0.02658EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/26 9:15 p.m.14 views

AZL-26809 CVE-2023-28320 affecting package mysql for versions less than 8.0.34-1

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.8AI score0.02658EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/26 9:15 p.m.8 views

ALPINE-CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.9AI score0.02658EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/26 9:15 p.m.13 views

AZL-38926 CVE-2023-28320 affecting package tensorflow for versions less than 2.16.1-1

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.8AI score0.02658EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/26 9:15 p.m.6 views

DEBIAN-CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.5AI score0.02658EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/26 9:15 p.m.11 views

AZL-26790 CVE-2023-28320 affecting package cmake for versions less than 3.21.4-11

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.8AI score0.02658EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2023/05/26 12:00 a.m.57 views

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.1AI score0.02658EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2023/05/26 12:00 a.m.125 views

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.7AI score0.02658EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/05/26 12:00 a.m.75 views

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

6.8AI score0.02658EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
added 2023/05/18 2:19 a.m.8 views

SUSE CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

3.7CVSS8.3AI score0.02658EPSS
SaveExploits1References98
Hacker One
Hacker One
added 2023/05/17 8:16 a.m.117 views

Internet Bug Bounty: CVE-2023-28320 - siglongjmp race condition

A race condition vulnerability CVE-2023-28320 existed in libcurl's synchronous resolver, which could allow a multi-threaded application to crash or misbehave due to the use of a global buffer that was not mutex protected. The vulnerability could result in a denial of service...

5.9CVSS5.8AI score0.02658EPSS
SaveExploits1
curl security advisories
curl security advisories
added 2023/05/17 8:00 a.m.19 views

siglongjmp race condition

libcurl provides several different backends for resolving hostnames, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doing this, libcurl used a global buffer that was not mutex protected a...

5.9CVSS6.5AI score0.02658EPSS
SaveExploits1References1Affected Software2
OSV
OSV
added 2023/05/17 8:00 a.m.34 views

CURL-CVE-2023-28320 siglongjmp race condition

libcurl provides several different backends for resolving hostnames, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doing this, libcurl used a global buffer that was not mutex protected a...

5.9CVSS5.9AI score0.02658EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2023/05/17 6:00 a.m.38 views

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

5.9CVSS6.9AI score0.02658EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/05/17 12:00 a.m.16 views

PT-2023-3433 · Curl +5 · Curl +5

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.1.0 Description: A denial of service issue exists in the way libcurl provides several different backends for resolving host names. If libcurl is built to use the synchronous resolver, it allows name resolves to time-o...

9.1CVSS6.5AI score0.58068EPSS
SaveExploits16References159
Fedora
Fedora
added 2023/04/29 5:12 a.m.32 views

[SECURITY] Fedora 36 Update: libsignal-protocol-c-2.3.3-7.fc36

This is a ratcheting forward secrecy protocol that works in synchronous and asynchronous messaging environments...

5.5CVSS6.1AI score0.00369EPSS
SaveExploits0
Fedora
Fedora
added 2023/04/29 4:42 a.m.33 views

[SECURITY] Fedora 37 Update: libsignal-protocol-c-2.3.3-8.fc37

This is a ratcheting forward secrecy protocol that works in synchronous and asynchronous messaging environments...

5.5CVSS6.1AI score0.00369EPSS
SaveExploits0
Fedora
Fedora
added 2023/04/29 2:53 a.m.32 views

[SECURITY] Fedora 38 Update: libsignal-protocol-c-2.3.3-9.fc38

This is a ratcheting forward secrecy protocol that works in synchronous and asynchronous messaging environments...

5.5CVSS6.1AI score0.00369EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/03/20 9:15 a.m.48 views

unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

9.8CVSS5.7AI score0.03771EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2023/02/22 1:08 a.m.35 views

new package: synce4l

An update is available for synce4l. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The synce4l packages are a software implementation of Synchronous Ethernet...

2.2AI score
SaveExploits0
Rows per page
Query Builder