Lucene search
Veracode Vulnerability DatabaseVERACODE:38703HistoryJan 02, 2023 - 9:47 a.m.
Denial Of Service (DOS)
2023-01-0209:47:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
github
vulnerability
zip file
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.002 Low
EPSS
Percentile
52.1%
github.com/sajari/docconv is vulnerable to Denial Of Service (DOS). The vulnerability exists in multiple functions because manipulation with an unknown input leads to a memory allocation when reading files from a ZIP archive.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/sajari/docconv | le | v1.2.0 | |
| github.com/sajari/docconv | le | v1.2.0 |
Related
osv
osv
Uncontrolled memory allocation in code.sajari.com/docconv
2023-01-12 17:34:50
CVE-2022-4741
2022-12-25 20:15:26
docconv vulnerable to Memory Allocation with Excessive Size Value
2022-12-25 21:30:21
nvd
nvd
CVE-2022-4741
2022-12-25 20:15:26
gitlab
gitlab
Memory Allocation with Excessive Size Value
2022-12-25 00:00:00
cve
cve
CVE-2022-4741
2022-12-25 20:15:26
cvelist
cvelist
CVE-2022-4741 docconv XMLToText memory allocation
2022-12-25 19:47:45
github
github
docconv vulnerable to Memory Allocation with Excessive Size Value
2022-12-25 21:30:21
prion
prion
Design/Logic Flaw
2022-12-25 20:15:00
veracode
veracode
Denial Of Service (DoS)
2023-01-04 14:11:05
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.002 Low
EPSS
Percentile
52.1%
Related for VERACODE:38703