2421 matches found
CVE-2017-7515: Uncontrolled Recursion
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service...
PT-2017-17783
Name of the Vulnerable Software and Affected Versions poppler versions prior to 0.55.0 Description The issue is related to an uncontrolled recursion in pdfunite, which can result in a potential denial-of-service. Recommendations For versions prior to 0.55.0, update to version 0.55.0 or later to...
CVE-2017-9438: Uncontrolled Recursion
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service stack consumption via a crafted rule involving hex strings that is mishandled in the yrreemit function, a different vulnerability than CVE-2017-9304...
CVE-2017-9304: Uncontrolled Recursion
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service stack consumption via a crafted rule that is mishandled in the yrreemit function...
CVE-2017-0886: Uncontrolled Recursion
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...
MGASA-2017-0103 Updated mxml packages fix security vulnerability
Two stack exhaustion issues based on uncontrolled recursion were found in mxml. A maliciously crafted xml file can cause the application to crash. Recursion using mxmlDelete at mxml-node.c:217 reproducer is stack-exhaustion-1.xml CVE-2016-4570. Recursion using mxmlwritenode at mxml-file.c:2739...
CVE-2017-5839: Uncontrolled Recursion
The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...
PT-2016-3269
Name of the Vulnerable Software and Affected Versions libxml2 versions 2.9.3 and earlier Description The issue is related to the xmlStringGetNodeList function in tree.c of the libxml2 library. It is caused by uncontrolled recursion when the function is used in recovery mode. This allows attackers...
The vulnerabilities of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, allow attackers to cause malfunctions during maintenance operations.
The vulnerability of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
PT-2015-5891
Name of the Vulnerable Software and Affected Versions Quassel versions prior to 0.12-rc1 Description The issue is related to a stack consumption problem in the message splitting functionality, allowing remote attackers to cause a denial of service through uncontrolled recursion by sending a craft...
CVE-2015-2779: Undefined Security Weakness
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
MGASA-2014-0537 Updated file packages fix security vulnerabilities
Updated file packages fix security vulnerabilities: Thomas Jarosch of Intra2net AG reported that using the file command on a specially-crafted ELF binary could lead to a denial of service due to uncontrolled resource consumption CVE-2014-8116. Thomas Jarosch of Intra2net AG reported that using th...
PT-2014-4008
Name of the Vulnerable Software and Affected Versions SAP Netweaver versions 7.20, 7.01, and earlier Description The issue allows remote attackers to cause a denial of service, resulting in uncontrolled recursion and crash, by utilizing a trace level with a wildcard in the Trace Pattern...
CVE-2014-0995: Improper Input Validation
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
SAP Netweaver Enqueue Server - Denial of Service
Exploit for windows platform in category dos / poc SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID: CORE-2014-0007 Advisory URL:...
SAP Netweaver Enqueue Server Trace Pattern Denial Of Service
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID: CORE-2014-0007 Advisory URL:...
SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability
Advisory ID Internal CORE-2014-0007 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID: CORE-2014-0007 Advisory...