Lucene search
+L

133 matches found

OSV
OSV
•added 2021/04/06 8:15 p.m.•3 views

DEBIAN-CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/06 8:15 p.m.•13 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS0.0197EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/06 8:15 p.m.•18 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS6.3AI score
SaveExploits0References4
OSV
OSV
•added 2021/04/06 8:15 p.m.•10 views

UBUNTU-CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0References6
Prion
Prion
•added 2021/04/06 8:15 p.m.•20 views

Design/Logic Flaw

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

5CVSS7AI score0.0197EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2021/04/06 8:15 p.m.•30 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7AI score0.0197EPSS
SaveExploits0References5
CVE
CVE
•added 2021/04/06 8:00 p.m.•237 views

CVE-2021-21404

CVE-2021-21404 affects Syncthing up to version 1.15.0, where the relay server and Syncthing itself can crash if a malformed relay protocol message with a negative length is received. The issue can be triggered by a crafted message from a malicious relay or by sending a relay message with a negati...

7.5CVSS7AI score0.0197EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2021/04/06 8:00 p.m.•54 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/04/06 8:00 p.m.•30 views

CVE-2021-21404 Crash due to malformed relay protocol message

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.3AI score0.0197EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2021/04/06 8:00 p.m.•76 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/04/06 12:00 a.m.•14 views

Jakob Borg syncthing 输入验证错误漏洞

Jakob Borg syncthing is a Jakob Borg open source application. A continuous file synchronization program. A security vulnerability exists in Syncthing before version 1.15.0, which stems from the possibility of crashing and exiting by sending a relay message with a negative length field...

7.5CVSS7.2AI score0.0197EPSS
SaveExploits0References6
FreeBSD
FreeBSD
•added 2021/04/06 12:00 a.m.•26 views

syncthing -- crash due to malformed relay protocol message

syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay protocol message message with a negative length field. The relay server strelaysrv can be caused to crash and exit if sent a malformed relay protocol message with a negative length field...

7.5CVSS3AI score0.0197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/06 12:00 a.m.•8 views

PT-2021-14481 · Syncthing +2 · Syncthing +2

Name of the Vulnerable Software and Affected Versions: Syncthing versions prior to 1.15.0 Description: The issue allows a malicious relay server to cause Syncthing to crash by sending a malformed relay protocol message with a negative length field. Similarly, the relay server strelaysrv can be...

7.5CVSS7.6AI score0.0197EPSS
SaveExploits1References33
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/06 12:00 a.m.•3 views

CVE-2021-21404: Improper Input Validation

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS5.8AI score0.0197EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/01/16 12:00 a.m.•52 views

openSUSE Security Update : syncthing (openSUSE-2018-45)

This update for syncthing brings a new version and fixes the following issues : - Update to version 0.14.42 : - Discovering new files in a deleted directory does not resurrect the directory ghsyncthing/syncthing4475. - 'Panic: interface conversion: errors.errorString is not net.Error' after resta...

7.5CVSS7.2AI score0.01509EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/01/03 12:00 a.m.•16 views

Syncthing Symbolic Link Traversal Vulnerability

Syncthing is an open source continuous file synchronization program. A security vulnerability exists in Syncthing 0.14.33 and earlier versions. An attacker can exploit the vulnerability to overwrite arbitrary files...

7.5CVSS7AI score0.01509EPSS
SaveExploits0References1
OSV
OSV
•added 2018/01/02 7:29 p.m.•33 views

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

7.5CVSS7.8AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/01/02 7:29 p.m.•29 views

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

7.5CVSS7.2AI score0.01509EPSS
SaveExploits0References2
Prion
Prion
•added 2018/01/02 7:29 p.m.•23 views

Design/Logic Flaw

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

6.4CVSS7.5AI score0.01509EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/01/02 7:29 p.m.•28 views

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

7.5CVSS7.5AI score0.01509EPSS
SaveExploits0References1
Rows per page
Query Builder