Lucene search
+L

7008 matches found

osv_debian
osv_debian
•added 2019/08/15 5:15 p.m.•11 views

DEBIAN-CVE-2019-13219

A NULL pointer dereference in the getwindow function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

5.5CVSS5.4AI score0.00961EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2019/08/15 5:15 p.m.•15 views

UBUNTU-CVE-2019-13219

A NULL pointer dereference in the getwindow function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

5.5CVSS6AI score0.00961EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2019/08/15 12:00 a.m.•11 views

PT-2019-13186 · No Company · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: A NULL pointer dereference in the get window function allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. Recommendations: For versions through 2019-03-04,...

8.8CVSS5.8AI score0.02093EPSS
SaveExploits5References49
CNVD
CNVD
•added 2019/08/15 12:00 a.m.•27 views

Sean Barrett stb_vorbis code issue vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A code issue vulnerability exists in the 'getwindow' function in versions 2019-03-04 and earlier. The vulnerability stems from an improperly designed or implemented code development process...

5.5CVSS6.9AI score0.00961EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/08/14 12:00 a.m.•60 views

nginx < 1.16.1 (stable) / 1.17.3 (mainline) Multiple DoS

Binary data 701146.prm...

7.8CVSS7.3AI score0.81556EPSS
SaveExploits0References5
osv_alpine
osv_alpine
•added 2019/08/13 9:15 p.m.•13 views

ALPINE-CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.5CVSS7.4AI score0.59547EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/13 9:15 p.m.•41 views

CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.8CVSS6.4AI score0.59547EPSS
SaveExploits0References47
osv_cve
osv_cve
•added 2019/08/13 9:15 p.m.•46 views

CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.5CVSS7.6AI score
SaveExploits0References47
osv_cve
osv_cve
•added 2019/08/13 9:15 p.m.•97 views

CVE-2019-9517

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write many of the byt...

7.5CVSS2.9AI score0.2789EPSS
SaveExploits0References47
Prion
Prion
•added 2019/08/13 9:15 p.m.•94 views

Code injection

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.8CVSS7.4AI score0.59547EPSS
SaveExploits0References47Affected Software18
Prion
Prion
•added 2019/08/13 9:15 p.m.•56 views

Design/Logic Flaw

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write many of the byt...

7.8CVSS7.4AI score0.2789EPSS
SaveExploits0References47Affected Software20
Cvelist
Cvelist
•added 2019/08/13 8:50 p.m.•84 views

CVE-2019-9511 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.5CVSS6.7AI score0.59547EPSS
SaveExploits0References47
Debian CVE
Debian CVE
•added 2019/08/13 8:50 p.m.•57 views

CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.8CVSS7.4AI score0.59547EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2019/08/13 8:50 p.m.•80 views

CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.8CVSS7.4AI score0.59547EPSS
SaveExploits0
Nginx
Nginx
•added 2019/08/13 8:50 p.m.•526 views

Excessive CPU usage in HTTP/2 with small window updates

Excessive CPU usage in HTTP/2 with small window updates Severity: medium CVE-2019-9511 Not vulnerable: 1.17.3+, 1.16.1+ Vulnerable: 1.9.5-1.17.2...

7.8CVSS7.6AI score0.59547EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/08/13 8:50 p.m.•6 views

CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

8.7CVSS0.59547EPSS
SaveExploits0References58
AlpineLinux
AlpineLinux
•added 2019/08/13 8:50 p.m.•70 views

CVE-2019-9517

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write many of the byt...

7.8CVSS7.8AI score0.2789EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/08/13 8:50 p.m.•124 views

CVE-2019-9517 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write many of the byt...

7.5CVSS7.7AI score0.2789EPSS
SaveExploits0References47
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/13 12:00 a.m.•7 views

CVE-2019-9511: Uncontrolled Resource Consumption

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.8CVSS7.4AI score0.59547EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2019/08/13 12:00 a.m.•17 views

UBUNTU-CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.5CVSS7.4AI score0.59547EPSS
SaveExploits0References8
Rows per page
Query Builder