Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,969

Export CSV
CVE-2013-4348

kernel: net: deadloop path in skb_flow_dissect()

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

CVSS 2.0 · 7.1 High EPSS 9.7% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Mrg
CVE-2012-6109

rubygem-rack: parsing Content-Disposition header DoS

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Cloudforms Cloudengine Rack Project Rhel Sam
Products
1 Rack 1.2
CVE-2011-2213

kernel: inet_diag: insufficient validation

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Aus and 5 more
CVE-2011-3149

(pam_env): Infinite loop by expanding certain arguments

The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux-pam Redhat
Products
Linux-pam Enterprise Linux
CVE-2011-4621

kernel: tight loop and no preemption can cause system stall

The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes code in a loop.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2012-0248

ImageMagick: invalid validation of images denial of service

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

CVSS 3.1 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Imagemagick and 1 more
Products
Ubuntu Linux Debian Linux Imagemagick and 8 more
CVE-2012-0815

rpm: incorrect handling of negated offsets in headerVerifyInfo()

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

CVSS 2.0 · 6.8 Medium EPSS 4.2% KEV · Not listed
Vendors
Redhat Rpm
Products
Enterprise Linux Rhel Els Rhel Eus and 2 more
CVE-2012-3548

1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector

The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2012-5237

wireshark: Infinite loop in the HSRP dissector

The dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-7112

wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)

The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2012-6054

wireshark: DoS (infinite loop) in the sFlow dissector (wnpa-sec-2012-32)

The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service (infinite loop) via a packet that is neither IPv4 nor IPv6.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1581

wireshark: Infinite loop in the DCP-ETSI dissector (wnpa-sec-2013-01, bug 8222)

The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-2485

wireshark: Infinite loop in the FCSP dissector (wnpa-sec-2013-20, upstream bug 8359)

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Debian Opensuse Wireshark
Products
Debian Linux Opensuse Wireshark
CVE-2013-2482

wireshark: Infinite loop in the AMPQ dissector (wnpa-sec-2013-17, upstream bug 8337)

The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Opensuse Wireshark
Products
Opensuse Wireshark
CVE-2013-2476

wireshark: Infinite loop in the HART/IP dissector (wnpa-sec-2013-11, upstream bug 8360)

The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short.

CVSS 2.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Opensuse Wireshark
Products
Opensuse Wireshark
CVE-2013-2479

wireshark: Infinite loop in the MPLS Echo dissector (wnpa-sec-2013-14, upstream bug 8039)

The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data.

CVSS 2.0 · 3.3 Low EPSS 1.1% KEV · Not listed
Vendors
Opensuse Wireshark
Products
Opensuse Wireshark
CVE-2013-1582

wireshark: Infinite loop / crash in the CLNP dissector (wnpa-sec-2013-02, bug 7871)

The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1580

wireshark: Infinite loop in the DOCSIS 3.0 CM-STATUS dissector (wnpa-sec-2013-01, bug 8199)

The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1577

wireshark: Infinite loop in the SIP dissector (wnpa-sec-2013-01, bug 8042)

The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2013-1576

wireshark: Infinite loop in the SDP dissector (wnpa-sec-2013-01, bug 8041)

The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

CVSS 2.0 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark