CWE-674 Archives - CVE Vulnerability

CVE-2007-3409

Sun, 26 Feb 2023 09:06:43 +0000

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.

The post CVE-2007-3409 appeared first on CVE Vulnerability.

CVE-2007-1285

Sun, 26 Feb 2023 09:05:48 +0000

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

The post CVE-2007-1285 appeared first on CVE Vulnerability.

CVE-2018-9996

Sun, 26 Feb 2023 06:51:54 +0000

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.

The post CVE-2018-9996 appeared first on CVE Vulnerability.

CVE-2018-9918

Sun, 26 Feb 2023 06:51:52 +0000

libqpdf.a in QPDF through 8.0.2 mishandles certain “expected dictionary key but found non-name object” cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.

The post CVE-2018-9918 appeared first on CVE Vulnerability.

CVE-2018-9138

Sun, 26 Feb 2023 06:51:45 +0000

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.

The post CVE-2018-9138 appeared first on CVE Vulnerability.

CVE-2018-8015

Sun, 26 Feb 2023 06:51:15 +0000

In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser, the stack overflow might possibly corrupt the stack.

The post CVE-2018-8015 appeared first on CVE Vulnerability.

CVE-2018-6544

Sun, 26 Feb 2023 06:50:45 +0000

pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document.

The post CVE-2018-6544 appeared first on CVE Vulnerability.

CVE-2018-6003

Sun, 26 Feb 2023 06:50:32 +0000

An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.

The post CVE-2018-6003 appeared first on CVE Vulnerability.

CVE-2018-5759

Sun, 26 Feb 2023 06:50:27 +0000

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.

The post CVE-2018-5759 appeared first on CVE Vulnerability.

CVE-2018-5772

Sun, 26 Feb 2023 06:50:27 +0000

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file.

The post CVE-2018-5772 appeared first on CVE Vulnerability.