CWE-834 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-834/ Sun, 26 Feb 2023 06:51:46 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-834 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-834/ 32 32 CVE-2018-9261 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9261/ Sun, 26 Feb 2023 06:51:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9261/ In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs.

The post CVE-2018-9261 appeared first on CVE Vulnerability.

]]> In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs.

The post CVE-2018-9261 appeared first on CVE Vulnerability.

]]> CVE-2018-9133 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9133/ Sun, 26 Feb 2023 06:51:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9133/ ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

The post CVE-2018-9133 appeared first on CVE Vulnerability.

]]> ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

The post CVE-2018-9133 appeared first on CVE Vulnerability.

]]> CVE-2018-7323 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7323/ Sun, 26 Feb 2023 06:51:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7323/ In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing.

The post CVE-2018-7323 appeared first on CVE Vulnerability.

]]> In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing.

The post CVE-2018-7323 appeared first on CVE Vulnerability.

]]> CVE-2018-7321 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7321/ Sun, 26 Feb 2023 06:51:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7321/ In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type.

The post CVE-2018-7321 appeared first on CVE Vulnerability.

]]> In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type.

The post CVE-2018-7321 appeared first on CVE Vulnerability.

]]> CVE-2018-5252 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5252/ Sun, 26 Feb 2023 06:50:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5252/ libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.

The post CVE-2018-5252 appeared first on CVE Vulnerability.

]]> libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.

The post CVE-2018-5252 appeared first on CVE Vulnerability.

]]> CVE-2018-20805 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-20805/ Sun, 26 Feb 2023 06:48:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-20805/ A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10. This issue affects: MongoDB Inc. MongoDB Server 3.6 versions prior to 3.6.10; 4.0 versions prior to 4.0.5.

The post CVE-2018-20805 appeared first on CVE Vulnerability.

]]> A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10. This issue affects: MongoDB Inc. MongoDB Server 3.6 versions prior to 3.6.10; 4.0 versions prior to 4.0.5.

The post CVE-2018-20805 appeared first on CVE Vulnerability.

]]> CVE-2018-18651 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18651/ Sun, 26 Feb 2023 06:47:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18651/ An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop) via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file.

The post CVE-2018-18651 appeared first on CVE Vulnerability.

]]> An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop) via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file.

The post CVE-2018-18651 appeared first on CVE Vulnerability.

]]> CVE-2018-14342 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14342/ Sun, 26 Feb 2023 06:46:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14342/ In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.

The post CVE-2018-14342 appeared first on CVE Vulnerability.

]]> In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.

The post CVE-2018-14342 appeared first on CVE Vulnerability.

]]> CVE-2018-11813 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11813/ Sun, 26 Feb 2023 06:45:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11813/ libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

The post CVE-2018-11813 appeared first on CVE Vulnerability.

]]> libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

The post CVE-2018-11813 appeared first on CVE Vulnerability.

]]> CVE-2018-11507 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11507/ Sun, 26 Feb 2023 06:45:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11507/ An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.

The post CVE-2018-11507 appeared first on CVE Vulnerability.

]]> An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.

The post CVE-2018-11507 appeared first on CVE Vulnerability.

]]>