Search CVE reports


Toggle filters

101 – 110 of 847 results


CVE-2023-22485

Medium priority
Ignored

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function....

1 affected package

cmark-gfm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
cmark-gfm Ignored Ignored Ignored Not in release
Show less packages

CVE-2023-22484

Medium priority

Some fixes available 2 of 6

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource...

1 affected package

cmark-gfm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
cmark-gfm Fixed Ignored Ignored Not in release
Show less packages

CVE-2023-22483

Medium priority

Some fixes available 3 of 7

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded...

1 affected package

cmark-gfm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
cmark-gfm Fixed Fixed Ignored Not in release
Show less packages

CVE-2022-4345

Medium priority
Vulnerable

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Vulnerable Not affected
Show less packages

CVE-2022-4344

Medium priority
Vulnerable

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Vulnerable Not affected
Show less packages

CVE-2015-10005

Medium priority
Needs evaluation

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/html_re.js. The manipulation leads to inefficient regular expression complexity....

1 affected package

node-markdown-it

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
node-markdown-it Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2022-3724

Medium priority
Vulnerable

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Not affected Not affected
Show less packages

CVE-2022-3725

Medium priority
Vulnerable

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Vulnerable Not affected Not affected
Show less packages

CVE-2022-39209

Medium priority

Some fixes available 2 of 5

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded...

1 affected package

cmark-gfm

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
cmark-gfm Not affected Fixed Fixed Not in release
Show less packages

CVE-2022-3190

Medium priority

Some fixes available 1 of 3

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file

1 affected package

wireshark

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wireshark Not affected Fixed Not affected Not affected
Show less packages