Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:28 p.m.3 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS6.9AI score0.00228EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.3 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

5.3CVSS7.1AI score0.00155EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-45266

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2024/07/22 7:15 p.m.13 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

5.3CVSS7AI score
Exploits0References1
NVD
NVD
added 2024/07/22 7:15 p.m.21 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

5.3CVSS0.00155EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/22 12:0 a.m.14 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

0.00155EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/22 12:0 a.m.9 views

CVE-2024-41880

In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes...

7.1AI score0.00155EPSS
Exploits0References1
CVE
CVE
added 2024/07/22 12:0 a.m.45 views

CVE-2024-41880

CVE-2024-41880 affects veilid-core in Veilid prior to version 0.3.4. The issue arises from the protocol’s ping function , which can be misused to degrade the effectiveness of safety and private routes. The publicly documented remediation is to update to Veilid 0.3.4 or later . A temporary mitigat...

5.3CVSS7.1AI score0.00155EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/22 12:0 a.m.3 views

PT-2024-29611 · Veilid · Veilid

Name of the Vulnerable Software and Affected Versions: Veilid versions prior to 0.3.4 Description: The protocol's ping function in Veilid can be misused, decreasing the effectiveness of safety and private routes. Recommendations: For versions prior to 0.3.4, update to version 0.3.4 or later to...

5.3CVSS7.4AI score0.00155EPSS
Exploits0References5
NVD
NVD
added 2023/08/20 1:15 a.m.6 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS7.4AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2023/08/20 1:15 a.m.17 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS7.1AI score
Exploits0References1
Prion
Prion
added 2023/08/20 1:15 a.m.79 views

Code injection

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

5CVSS7.4AI score0.00228EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/20 12:0 a.m.12 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5AI score0.00228EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/20 12:0 a.m.8 views

CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.1AI score0.00228EPSS
Exploits0References1
CVE
CVE
added 2023/08/20 12:0 a.m.61 views

CVE-2023-40711

The CVE-2023-40711 issue affects Veilid prior to 0.1.9, where the uncompressed data size is not validated during decompression of an envelope receipt. This can cause a denial of service (out-of-memory abort) via crafted packet data; exploitation has been observed in the wild (Aug 2023). Affected ...

7.5CVSS7.3AI score0.00228EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/20 12:0 a.m.2 views

PT-2023-27609 · Veilid · Veilid

Name of the Vulnerable Software and Affected Versions: Veilid versions prior to 0.1.9 Description: The issue allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data. This is due to the lack of size checking for uncompressed data during decompression upon a...

7.5CVSS7.5AI score0.00228EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/08/20 12:0 a.m.1 views

Veilid 缓冲区错误漏洞

Veilid is Veilid open source a peer-to-peer network that makes it easy to share all kinds of data. A security vulnerability exists in Veilid versions prior to 0.1.9, which stems from a memory leak vulnerability due to failure to check the size of compressed data during the decompression process. ...

7.5CVSS7.3AI score0.00228EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2023/08/19 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-40711

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...

7.5CVSS7.2AI score0.00228EPSS
Exploits0References1
Rows per page
Query Builder