Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2014-2525

libyaml: heap-based buffer overflow when parsing URLs

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

CVSS 2.0 · 6.8 Medium EPSS 8.8% KEV · Not listed
Vendors
Opensuse Pyyaml Redhat
Products
Leap Opensuse Libyaml and 3 more
CVE-2014-3583

httpd: mod_proxy_fcgi handle_headers() buffer over read

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.

CVSS 2.0 · 5.0 Medium EPSS 10.8% KEV · Not listed
Vendors
Apache Apple Canonical and 1 more
Products
Http Server Mac Os X Os X Server and 3 more
CVE-2014-3619

glusterfs: fragment header infinite loop DoS

The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Gluster Opensuse Redhat
Products
Glusterfs Opensuse Rhel Common and 1 more
CVE-2013-2099

python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed
Vendors
Canonical Python Redhat
Products
Ubuntu Linux Python Openstack and 5 more
CVE-2013-6393

libyaml: heap-based buffer overflow when parsing YAML tags

The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 7.4% KEV · Not listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Leap and 5 more