# CWE-130.

Every Advisory and CVE whose sources give the weakness CWE-130, newest first.

## Records, newest first (an older page)

- [L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths](https://agentprime.io/advisories/CVE-2021-27861.md)
  `CVE-2021-27861` · CVE record: IEEE 802.2 and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2022 · Tags: Authentication bypass, CWE-130
- [rdiffweb's unlimited username field length can lead to DoS](https://agentprime.io/advisories/GHSA-5v95-j4rr-6f3c.md)
  `GHSA-5v95-j4rr-6f3c`, `CVE-2022-3290`, `PYSEC-2022-292`, `PYSEC-2022-43184` · PyPI `rdiffweb`: affected `<2.4.8`, fixed in `2.4.8` · CVSS 5.7 Medium · Not analysed yet · Published 27 Sept 2022 · Tags: CWE-130
- [Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.](https://agentprime.io/advisories/GHSA-qrj3-hrgj-fm7r.md)
  `GHSA-qrj3-hrgj-fm7r`, `CVE-2022-3272`, `PYSEC-2022-291` · PyPI `rdiffweb`: affected `<2.4.8`, fixed in `2.4.8` · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2022 · Tags: CWE-130
- [RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency](https://agentprime.io/advisories/GHSA-vh4m-mw8w-g4w8.md)
  `GHSA-vh4m-mw8w-g4w8`, `CVE-2022-2714`, `PKSA-5nzc-47j6-mn9r` · Packagist `francoisjacquet/rosariosis`: affected `<10.1`, fixed in `10.1` · CVSS 8.1 High · Not analysed yet · Published 7 Sept 2022 · Tags: CWE-130
- [Integer overflow in the bundled Brotli C library](https://agentprime.io/advisories/GHSA-5v8v-66v8-mwm7.md)
  `GHSA-5v8v-66v8-mwm7`, `BIT-brotli-2020-8927`, `BIT-dotnet-2020-8927`, `BIT-dotnet-sdk-2020-8927`, `BIT-powershell-2020-8927`, `CVE-2020-36846`, `CVE-2020-8927`, `GO-2025-3726`, `PYSEC-2020-29`, `RUSTSEC-2021-0131`, `RUSTSEC-2021-0132` · crates.io `compu-brotli-sys` and 117 more: affected `<1.0.9`, fixed in `1.0.9` · CVSS 5.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Memory corruption, CWE-130, CWE-1395
- [OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency](https://agentprime.io/advisories/CVE-2021-38445.md)
  `CVE-2021-38445` · CVE record: OCI OpenDDS · CVSS 7.0 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-130
- [Improper handling of Length parameter in erudika/scoold](https://agentprime.io/advisories/CVE-2022-1543.md)
  `CVE-2022-1543` · CVE record: erudika erudika/scoold · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Apr 2022 · Tags: CWE-130
- [Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)](https://agentprime.io/advisories/CVE-2022-0677.md)
  `CVE-2022-0677` · CVE record: Bitdefender Update Server and 3 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2022 · Tags: CWE-130
- [A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.](https://agentprime.io/advisories/CVE-2021-43666.md)
  `CVE-2021-43666` · CVE record · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2022 · Tags: CWE-130
- [A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame.](https://agentprime.io/advisories/CVE-2022-0618.md)
  `CVE-2022-0618` · CVE record: Swift Project SwiftNIO HTTP2 · No CVSS score · Not analysed yet · Published 9 Mar 2022 · Tags: CWE-130
- [A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame.](https://agentprime.io/advisories/CVE-2022-24666.md)
  `CVE-2022-24666` · CVE record: Swift Project SwiftNIO HTTP2 · No CVSS score · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-130
- [Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120S…](https://agentprime.io/advisories/CVE-2021-20610.md)
  `CVE-2021-20610` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Dec 2021 · Tags: CWE-130
- [AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.](https://agentprime.io/advisories/CVE-2021-26329.md)
  `CVE-2021-26329` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-130
- [Truncated L2CAP K-frame causes assertion failure](https://agentprime.io/advisories/CVE-2021-3454.md)
  `CVE-2021-3454` · CVE record: zephyrproject-rtos zephyr · CVSS 4.3 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Denial of service, CWE-130
- [Improper Handling of Length Parameter Inconsistency in Apache Ant](https://agentprime.io/advisories/GHSA-5v34-g2px-j4fw.md)
  `GHSA-5v34-g2px-j4fw`, `CVE-2021-36374` · Maven `org.apache.ant:ant`: affected `>=1.9.0, <1.9.16 || >=1.10.0, <1.10.11`, fixed in `1.9.16`, `1.10.11` · CVSS 5.5 Medium · Not analysed yet · Published 2 Aug 2021 · Tags: CWE-130
- [Improper Handling of Length Parameter Inconsistency in Apache Ant](https://agentprime.io/advisories/GHSA-q5r4-cfpx-h6fh.md)
  `GHSA-q5r4-cfpx-h6fh`, `CVE-2021-36373` · Maven `org.apache.ant:ant`: affected `<1.9.16 || >=1.10.0, <1.10.11`, fixed in `1.9.16`, `1.10.11` · CVSS 5.5 Medium · Not analysed yet · Published 2 Aug 2021 · Tags: CWE-130
- [Improper Handling of Length Parameter Inconsistency in Compress](https://agentprime.io/advisories/GHSA-mc84-pj99-q6hh.md)
  `GHSA-mc84-pj99-q6hh`, `CVE-2021-36090` · Maven `org.apache.commons:commons-compress`: affected `<1.21`, fixed in `1.21` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 2 Aug 2021 · Tags: CWE-130
- [Improper Handling of Length Parameter Inconsistency in Compress](https://agentprime.io/advisories/GHSA-xqfj-vm6h-2x34.md)
  `GHSA-xqfj-vm6h-2x34`, `CVE-2021-35517` · Maven `org.apache.commons:commons-compress`: affected `<1.21`, fixed in `1.21` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 2 Aug 2021 · Tags: Denial of service, CWE-130
- [Improper Handling of Length Parameter Inconsistency in Compress](https://agentprime.io/advisories/GHSA-crv7-7245-f45f.md)
  `GHSA-crv7-7245-f45f`, `CVE-2021-35516` · Maven `org.apache.commons:commons-compress`: affected `<1.21`, fixed in `1.21` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 2 Aug 2021 · Tags: Denial of service, CWE-130
- [Missing Size Checks in Bluetooth HCI over SPI](https://agentprime.io/advisories/CVE-2020-10065.md)
  `CVE-2020-10065` · CVE record: zephyrproject-rtos zephyr · CVSS 3.8 Low · Not analysed yet · Published 24 May 2021 · Tags: CWE-130
- [Mitsubishi Electric Corporation CPU Module Logging…: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric…](https://agentprime.io/advisories/CVE-2021-20588.md)
  `CVE-2021-20588` · CVE record: Mitsubishi Electric Corporation CPU Module Logging Configuration Tool and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Feb 2021 · Tags: CWE-130
- [Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency](https://agentprime.io/advisories/CVE-2020-16224.md)
  `CVE-2020-16224` · CVE record: Philips Patient Information Center iX (PICiX) · No CVSS score · Not analysed yet · Published 11 Sept 2020 · Tags: CWE-130
- [Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.](https://agentprime.io/advisories/CVE-2019-0055.md)
  `CVE-2019-0055` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-130
- [libssh2: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way…](https://agentprime.io/advisories/CVE-2019-3862.md)
  `CVE-2019-3862` · CVE record: The libssh2 Project libssh2 · CVSS 7.3 High · Not analysed yet · Published 20 Mar 2019 · Tags: CWE-130
- [Moxa OnCell G3100-HSPA Series: An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa…](https://agentprime.io/advisories/CVE-2018-5453.md)
  `CVE-2018-5453` · CVE record: Moxa OnCell G3100-HSPA Series · No CVSS score · Not analysed yet · Published 5 Mar 2018 · Tags: CWE-130

Newest: <https://agentprime.io/advisories/tag/cwe-130.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-130&cursor=WyIyMDIyLTA5LTI3VDE4OjQwOjE0LjcxMjAwMFoiLCJDVkUtMjAyMS0yNzg2MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-130/?cursor=WyIyMDIyLTA5LTI3VDE4OjQwOjE0LjcxMjAwMFoiLCJDVkUtMjAyMS0yNzg2MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.