Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,969

Export CSV
CVE-2015-6525

libevent: multiple integer overflows in the evbuffer APIs

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Debian Libevent Project
Products
Debian Linux Libevent
CVE-2014-3598

python-pillow: Jpeg2KImagePlugin infinite loop DoS

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Opensuse Python
Products
Opensuse Pillow
CVE-2015-3814

wireshark: IEEE 802.11 infinite loop (wnpa-sec-2015-17)

The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Oracle Wireshark
Products
Solaris Wireshark
CVE-2015-3810

wireshark: WebSocket DoS (wnpa-sec-2015-13)

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 3.5% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2015-3809

wireshark: LBMR infinite loop (wnpa-sec-2015-12)

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2015-3808

wireshark: LBMR infinite loop (wnpa-sec-2015-12)

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2015-1792

OpenSSL: CMS verify infinite loop with unknown hash function

The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.

CVSS 2.0 · 5.0 Medium EPSS 22.9% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux
CVE-2014-3619

glusterfs: fragment header infinite loop DoS

The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Gluster Opensuse Redhat
Products
Glusterfs Opensuse Rhel Common and 1 more
CVE-2014-4617

gnupg: infinite loop when decompressing data packets

The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Debian Gnupg Opensuse
Products
Debian Linux Gnupg Opensuse
CVE-2014-8121

glibc: Unexpected closing of nss_files databases after lookups causes denial of service

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.

CVSS 2.0 · 5.0 Medium EPSS 5.6% KEV · Not listed
Vendors
Canonical Gnu Redhat and 1 more
Products
Ubuntu Linux Glibc Enterprise Linux and 2 more
CVE-2015-1788

OpenSSL: Malformed ECParameters causes infinite loop

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.

CVSS 2.0 · 4.3 Medium EPSS 20.5% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2013-10005

Infinite loop in github.com/btcsuite/go-socks

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Socks5 Project
Products
Socks5
CVE-2013-1575

wireshark: Infinite loop in the R3 dissector (wnpa-sec-2013-01, bug 8040)

The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1574

wireshark: Infinite loop in the Bluetooth HCI dissector (wnpa-sec-2013-01, bug 8038)

The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1576

wireshark: Infinite loop in the SDP dissector (wnpa-sec-2013-01, bug 8041)

The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1577

wireshark: Infinite loop in the SIP dissector (wnpa-sec-2013-01, bug 8042)

The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1573

wireshark: Infinite loop in the CSN.1 dissector (wnpa-sec-2013-01, bug 8037)

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1580

wireshark: Infinite loop in the DOCSIS 3.0 CM-STATUS dissector (wnpa-sec-2013-01, bug 8199)

The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1581

wireshark: Infinite loop in the DCP-ETSI dissector (wnpa-sec-2013-01, bug 8222)

The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1582

wireshark: Infinite loop / crash in the CLNP dissector (wnpa-sec-2013-02, bug 7871)

The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark