Browse CVEs

HIGH 8.6 CVE-2024-20353 KEVEPSS 71% A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) S… Adaptive Security Appliance Software Mitigation only Fix from $1,9502024-04-24 HIGH 7.5 CVE-2024-32650 Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When… Patch available Fix from $1,9502024-04-19 MEDIUM 6.2 CVE-2024-2397 Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap sav… Patch available Fix from $1,6002024-04-12 HIGH 7.5 CVE-2024-28732 An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite… Ryu No fix yet Fix from $1,9502024-04-08 MEDIUM 6.5 CVE-2024-31949 In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results i… Frrouting after 9.1 Fix from $1,6002024-04-07 HIGH 7.5 CVE-2024-24746 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.  Specially crafted GATT operation can cause infinite loop in … Nimble 1.7.0+ Fix from $1,9502024-04-06 MEDIUM 5.5 CVE-2024-26780 In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix task hung while purging oob_skb in GC. syzbot reported a task hung… Linux Kernel 6.1.81 / 6.6.21+ Fix from $1,6002024-04-04 MEDIUM 5.5 CVE-2024-26767 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations [why]: issues fix… Linux Kernel 6.6.19 / 6.7.7+ Fix from $1,6002024-04-03 MEDIUM 5.4 CVE-2024-28836 An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS 1.2 implemen… Mbed Tls 3.6.0+ Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-26681 In the Linux kernel, the following vulnerability has been resolved: netdevsim: avoid potential loop in nsim_dev_trap_report_work() Many syzbot repo… Linux Kernel 6.1.78 / 6.6.17+ Fix from $1,6002024-04-02 MEDIUM 5.5 CVE-2023-52635 In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize devfreq_monitor_[start/stop] There is a chance if a f… Linux Kernel 5.10.210 / 5.15.149+ Fix from $1,6002024-04-02 HIGH 7.5 CVE-2024-29904 CodeIgniter is a PHP full-stack web framework A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exp… Codeigniter 4.4.7+ Fix from $1,9502024-03-29 MEDIUM 5.5 CVE-2021-47159 In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() … Linux Kernel 4.19.193 / 5.4.124+ Fix from $1,6002024-03-25 MEDIUM 5.5 CVE-2024-21408 Windows Hyper-V Denial of Service Vulnerability Windows 10 1507 10.0.10240.20526 / 10.0.14393.6796+ Fix from $1,6002024-03-12 HIGH 7.5 CVE-2024-1931 NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path … Fedora 1.19.2+ Fix from $1,9502024-03-07 MEDIUM 5.5 CVE-2022-48630 In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ The co… Linux Kernel 4.19.245 / 5.4.196+ Fix from $1,6002024-03-05 MEDIUM 5.5 CVE-2024-26603 In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before thi… Linux Kernel 5.15.150 / 6.1.79+ Fix from $1,6002024-02-26 HIGH 7.5 CVE-2024-27359 Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. This a… Mitigation only Fix from $1,9502024-02-26 MEDIUM 5.5 CVE-2024-25710 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 … Commons Compress 1.26.0+ Fix from $1,6002024-02-19 MEDIUM 6.5 CVE-2024-25144 The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6… Digital Experience Platform 7.4.3.26+ Fix from $1,6002024-02-08 CRITICAL 9.1 CVE-2021-42143 An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handsh… Tinydtls after 2018-08-30 Fix from $2,3002024-01-24 HIGH 7.5 CVE-2023-51890 An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application… Mathtex after 1.05 Fix from $1,9502024-01-24 HIGH 7.5 CVE-2023-45232 EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This … Edk2 after 202311 Fix from $1,9502024-01-16 HIGH 7.5 CVE-2023-45233 EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vu… Edk2 after 202311 Fix from $1,9502024-01-16 HIGH 7.5 CVE-2023-0437 When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affe… C Driver 1.25.0+ Fix from $1,9502024-01-12 MEDIUM 5.5 CVE-2023-50120 MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c.… Gpac No fix yet Fix from $1,6002024-01-10 MEDIUM 6.5 CVE-2023-47997 An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denia… Freeimage No fix yet Fix from $1,6002024-01-10 HIGH 7.5 CVE-2024-0211 DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Wireshark No fix yet Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-43511 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-01-02 MEDIUM 5.5 CVE-2023-50570 An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only … Ipaddress No fix yet Fix from $1,6002023-12-29