404 matches found
GHSA-23VW-MHV5-GRV5 Denial of Service in @hapi/hapi
Versions of @hapi/hapi prior to 18.4.1 or 19.1.1 are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will...
Denial of Service in @commercial/subtext
Version 5.1.1 of @commercial/subtext is vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to catching expecte...
Denial of Service in @hapi/accept
Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to...
GHSA-MG85-8MV5-FFJR Denial of Service in ammo
All versions of ammo are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error is thrown all the way up t...
CVE-2020-15701
An unhandled exception in checkignored in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.1...
Code injection
An unhandled exception in checkignored in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.1...
CVE-2020-15701 Unhandled exception in apport
An unhandled exception in checkignored in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.1...
CVE-2020-15701
The CVE-2020-15701 issue affects the apport component (Apport) where an unhandled exception in check_ignored() can crash the process if mtime in apport-ignore.xml is a string, enabling a local DoS. Exploitation details are not described beyond local access prerequisites. The vulnerability is addr...
CVE-2020-15701
An unhandled exception in checkignored in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.1...
UBUNTU-CVE-2020-15701
An unhandled exception in checkignored in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.1...
Logic Flaw Vulnerability in CPP-Ethereum JSON-RPC
CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote call services that uses JSON as a protocol. An exploitable unhandled exception vulnerability exists in multiple APIs of JSON-RPC for CPP-Ethereum. An attacker could exploit this vulnerability ...
Denial of Service
Overview Versions of @hapi/hapi prior to 18.4.1 or 19.1.1 are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the...
Denial of Service
Overview All Versions of hapi are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist, allowing an...
Denial of Service
Overview Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as oppose...
Denial of Service
Overview Versions of @commercial/ammo prior to 2.1.1 are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the...
Intel Ethernet 700 Series Controllers Unhandled Exception Vulnerability (CNVD-2019-41455)
Intel Ethernet 700 Series Controllers are network adapter products from Intel. An unhandled exception vulnerability exists in the kernel mode driver for Intel Ethernet 700 Series Controllers versions prior to 7.0. An attacker could exploit this vulnerability to cause a denial of service...
Intel Ethernet 700 Series Controllers Unhandled Exception Vulnerability
Intel Ethernet 700 Series Controllers are network adapter products from Intel. An unhandled exception vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-0144
Unhandled exception in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access...
CVE-2019-0143
Intel Ethernet 700 Series Controllers (firmware/software prior to version 7.0) are affected by CVE-2019-0143 due to an unhandled exception in kernel-mode drivers, potentially allowing a locally authenticated user to cause a denial of service. Intel’s advisory INTEL-SA-00255 and vendor mitigations...
