Lucene search
K

15 matches found

NVD
NVD
added 2026/03/31 4:16 p.m.2 views

CVE-2026-34219

libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Rust libp2p Gossipsub implementation contains a remotely reachable panic in backoff expiry handling. After a peer sends a crafted PRUNE control message with an attacker-controlled...

8.2CVSS0.0011EPSS
Exploits1References1
CVE
CVE
added 2026/03/31 3:47 p.m.5 views

CVE-2026-34219

CVE-2026-34219 affects libp2p-rust’s libp2p-gossipsub: prior to 0.49.4, Gossipsub’s backoff expiry handling can overflow when adding Slack to an Instant, after a crafted PRUNE with attacker-controlled backoff. This remotely reachable panic is triggered in heartbeat processing and is exploitable o...

8.2CVSS5.8AI score0.0011EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2026/03/31 3:47 p.m.22 views

CVE-2026-34219 libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow

libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Rust libp2p Gossipsub implementation contains a remotely reachable panic in backoff expiry handling. After a peer sends a crafted PRUNE control message with an attacker-controlled...

8.2CVSS0.0011EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/31 3:47 p.m.2 views

CVE-2026-34219 libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow

libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Rust libp2p Gossipsub implementation contains a remotely reachable panic in backoff expiry handling. After a peer sends a crafted PRUNE control message with an attacker-controlled...

8.2CVSS5.8AI score0.0011EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/31 3:47 p.m.4 views

CVE-2026-34219

libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Rust libp2p Gossipsub implementation contains a remotely reachable panic in backoff expiry handling. After a peer sends a crafted PRUNE control message with an attacker-controlled...

8.2CVSS5.8AI score0.0011EPSS
Exploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 3:49 p.m.8 views

CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

7.8CVSS7.2AI score0.00188EPSS
Exploits1
OSV
OSV
added 2021/07/21 6:15 p.m.2 views

UBUNTU-CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

7.8CVSS5.8AI score0.00188EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/07/21 12:0 a.m.2 views

Sam2p 缓冲区错误漏洞

sam2p is a software package. Can convert raster images to PostScript, PDF and other formats A security vulnerability exists in Sam2p version 0.49.4, where carefully crafted inputs will result in a denial of service or may lead to unspecified other effects...

7.8CVSS7.4AI score0.00188EPSS
Exploits1References3
CNVD
CNVD
added 2018/06/20 12:0 a.m.1 views

sam2p buffer overflow vulnerability

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A buffer overflow vulnerability exists in the 'bmpcompress1row' function in the appliers.cpp file in sam2p version 0.49.4. An attacker could exploit this vulnerability to cause a denial of...

9.8CVSS9.4AI score0.00342EPSS
Exploits1References1
OSV
OSV
added 2018/06/19 3:29 p.m.0 views

UBUNTU-CVE-2018-12578

There is a heap-based buffer overflow in bmpcompress1row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact...

9.8CVSS7.5AI score0.00342EPSS
Exploits1References3
CNVD
CNVD
added 2018/02/28 12:0 a.m.2 views

sam2p denial of service vulnerability (CNVD-2018-04651)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. A denial of service vulnerability exists in sam2p 0.49.4. The vulnerability arises due to an invalid release of MiniPS::delete0 in minips.cpp, which can lead...

9.8CVSS7AI score0.00567EPSS
Exploits1References1
CNVD
CNVD
added 2018/02/28 12:0 a.m.1 views

sam2p denial of service vulnerability (CNVD-2018-04650)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. A denial of service vulnerability exists in sam2p 0.49.4. The vulnerability arises due to an invalid release of Mapping::DoubleHash::clear in mapping.cpp in...

9.8CVSS7AI score0.00567EPSS
Exploits1References1
CNVD
CNVD
added 2018/02/28 12:0 a.m.2 views

sam2p denial of service vulnerability (CNVD-2018-04648)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. A denial of service vulnerability exists in sam2p 0.49.4. The vulnerability arises due to an invalid release of ReadImage in input-bmp.ci in sam2p, which can...

9.8CVSS7AI score0.00567EPSS
Exploits1References1
CNVD
CNVD
added 2018/02/28 12:0 a.m.2 views

sam2p heap buffer overflow vulnerability (CNVD-2018-04649)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. A heap buffer overflow vulnerability exists in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. An attacker can exploit this vulnerability via...

9.8CVSS7.5AI score0.00559EPSS
Exploits1References1
CNVD
CNVD
added 2017/11/09 12:0 a.m.2 views

sam2p integer overflow vulnerability (CNVD-2017-36354)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. An integer overflow vulnerability exists in input-bmp.ci in the ReadImage function in sam2p version 0.49.4, for which there is currently no detailed...

5.5CVSS7.2AI score0.00175EPSS
Exploits0References1
Rows per page
Query Builder