2433 matches found
PT-2022-5229
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.12 Go versions prior to 1.18.4 Description The issue is related to uncontrolled recursion in the Decoder.Skip function in the encoding/xml package. This allows an attacker to cause a panic due to stack exhaustion by...
PT-2022-20222
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.12 Go versions prior to 1.18.4 Description The issue is caused by uncontrolled recursion in the Unmarshal function in encoding/xml. This allows an attacker to cause a panic due to stack exhaustion via unmarshalling an...
PT-2022-14222
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.12 Go versions prior to 1.18.4 Description The issue is related to uncontrolled recursion in the Parse functions in go/parser, which can cause a panic due to stack exhaustion via deeply nested types or declarations. A...
CVE-2022-31099 Uncontrolled Recursion in rulex
rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. This is ...
OESA-2022-1717 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2022:2102-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2102-1 advisory. - CVE-2017-17087: Fixed information leak via .swp files bsc1070955. - CVE-2021-3875: Fixed heap-based buffer...
The vulnerability of the Vim text editor, caused by uncontrolled recursion, allows a hacker to trigger a service failure.
The vulnerability of the Vim text editor arises from uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-H86H-8PPG-MXMH golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion
golang.org/x/net/http/httpguts in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service panic via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations...
golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion
golang.org/x/net/http/httpguts in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service panic via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations...
Uncontrolled Recursion
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service panic via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations...
Uncontrolled Recursion
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service panic via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations...
re2c -- uncontrolled recursion
re2c reports: re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...
Uncontrolled Recursion
Overview std/encoding/pem is a Go standard library package std/encoding/pem Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Stack overflow via a large amount of PEM data via the Decode function. An attacker can cause a stack overflow and...
CVE-2022-1771
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975...
DEBIAN-CVE-2022-1771
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975...
AZL-9789 CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975...
UBUNTU-CVE-2022-1771
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975...
Information disclosure
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975...
