Search CVE reports
31 – 40 of 41274 results
pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the...
2 affected packages
pypdf, pypdf2
| Package | 18.04 LTS |
|---|---|
| pypdf | — |
| pypdf2 | Needs evaluation |
In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).
1 affected package
gnupg2
| Package | 18.04 LTS |
|---|---|
| gnupg2 | Not affected |
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
1 affected package
gnupg2
| Package | 18.04 LTS |
|---|---|
| gnupg2 | Not affected |
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged...
1 affected package
gnupg2
| Package | 18.04 LTS |
|---|---|
| gnupg2 | Not affected |
Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions...
1 affected package
suricata
| Package | 18.04 LTS |
|---|---|
| suricata | Needs evaluation |
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known...
1 affected package
suricata
| Package | 18.04 LTS |
|---|---|
| suricata | Needs evaluation |
Suricata is a network IDS, IPS and NSM engine. While saving a dataset a stack buffer is used to prepare the data. Prior to versions 8.0.3 and 7.0.14, if the data in the dataset is too large, this can result in a stack overflow....
1 affected package
suricata
| Package | 18.04 LTS |
|---|---|
| suricata | Needs evaluation |
Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and...
1 affected package
suricata
| Package | 18.04 LTS |
|---|---|
| suricata | Needs evaluation |
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values...
1 affected package
suricata
| Package | 18.04 LTS |
|---|---|
| suricata | Needs evaluation |
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
1 affected package
mongodb
| Package | 18.04 LTS |
|---|---|
| mongodb | Needs evaluation |