CVE-2022-41717 vulnerabilities and exploits

(subscribe to this query)

5.3

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the...

Golang Go Golang Http23 Github repositories available

7.5

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse....

Golang Text3 Github repositories available

7.5

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error....

Golang Go 1.19.0 Golang Go Fedoraproject Fedora 36 Fedoraproject Fedora 375 Github repositories available

7.5

CVSSv3

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp....

Webkitgtk Webkitgtk Debian Debian Linux 10.0 Debian Debian Linux 11.01 Github repository available

6.5

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns...

Nlnetlabs Unbound Fedoraproject Fedora 35 Fedoraproject Fedora 362 Github repositories available

6.5

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is...

Nlnetlabs Unbound Fedoraproject Fedora 35 Fedoraproject Fedora 362 Github repositories available

6.5

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size...

D-bus Project D-bus Fedoraproject Fedora 36 Fedoraproject Fedora 371 Github repository available

7.5

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively...

Golang Go Fedoraproject Fedora 372 Github repositories available

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook