guido vranken vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response.

Debian Debian Linux 7.0 Dhcpcd Project Dhcpcd 3.2.3 Dhcpcd Project Dhcpcd 3.2.1 Dhcpcd Project Dhcpcd 3.1.9 Dhcpcd Project Dhcpcd 3.2.2 Dhcpcd Project Dhcpcd 3.2.0

7.5

CVSSv3

The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response.

Debian Debian Linux 7.0 Dhcpcd Project Dhcpcd 3.2.2 Dhcpcd Project Dhcpcd 3.2.0 Dhcpcd Project Dhcpcd 3.1.9 Dhcpcd Project Dhcpcd 3.2.3 Dhcpcd Project Dhcpcd 3.2.1

7.5

CVSSv3

The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.

Debian Debian Linux 7.0 Dhcpcd Project Dhcpcd 3.2.2 Dhcpcd Project Dhcpcd 3.2.0 Dhcpcd Project Dhcpcd 3.1.9 Dhcpcd Project Dhcpcd 3.2.3 Dhcpcd Project Dhcpcd 3.2.1

6.5

CVSSv3

OpenVPN versions prior to 2.3.15 and prior to 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.

Openvpn Openvpn Openvpn Openvpn 2.4.0 Openvpn Openvpn 2.4.1

7.5

CVSSv3

OpenVPN versions prior to 2.4.3 and prior to 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.

Openvpn Openvpn Openvpn Openvpn 2.4.1 Openvpn Openvpn 2.4.2 Openvpn Openvpn 2.4.0

1 Article

5.9

CVSSv3

OpenVPN versions prior to 2.4.3 and prior to 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().

Openvpn Openvpn Openvpn Openvpn 2.4.0 Openvpn Openvpn 2.4.2 Openvpn Openvpn 2.4.1

1 Article

7.4

CVSSv3

OpenVPN versions prior to 2.4.3 and prior to 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.

Openvpn Openvpn 2.4.0 Openvpn Openvpn 2.4.1 Openvpn Openvpn 2.4.2 Openvpn Openvpn

1 Article

7.5

CVSSv3

The search_make_new function in evdns.c in libevent prior to 2.1.6-beta allows malicious users to cause a denial of service (out-of-bounds read) via an empty hostname.

Debian Debian Linux 8.0 Libevent Project Libevent

5.9

CVSSv3

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 prior to 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are imp...

Openssl Openssl Nodejs Node.js

5.3

CVSSv3

There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult ...

Openssl Openssl Opensuse Leap 15.1 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Mysql Enterprise Monitor Oracle Enterprise Manager Ops Center 12.4.0.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Tenable Log Correlation Engine

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook