Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-7226

cryptacular: excessive memory allocation during a decode operation

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Oracle Redhat Vt
Products
Communications Services Gatekeeper Webcenter Sites Weblogic Server and 4 more