CWE-130.

Ovn: ovn: information disclosure via crafted dhcpv6 packets

• Fast Datapath for Red Hat Enterprise Linux 10
• Fast Datapath for Red Hat Enterprise Linux 8
• CWE-130

rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer

• CWE-126
• CWE-130

>=0.9.24, <0.10.78 · fixed in 0.10.78

Samba rsync: In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a…

• Samba rsync
• Memory corruption
• CWE-130

An issue was discovered in HAProxy before 3.3.6.

• HAProxy
• CWE-130

Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass

• STIGTSP Net::CIDR::Lite
• CWE-130

Rack has Content-Length mismatch in Rack::Files error responses

• CWE-130
• CWE-135

<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6 · fixed in 2.2.23, 3.1.21, 3.2.6

python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

• CWE-20
• CWE-130

<0.19.2 · fixed in 0.19.2

Out of bounds read in IMAP parsing

• Mozilla Thunderbird
• CWE-126
• CWE-130

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

• Siemens SICAM SIAPP SDK
• CWE-130

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

• Siemens SICAM SIAPP SDK
• CWE-130

Yokogawa Electric Corporation Vnet/IP Interface Package: A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric…

• Yokogawa Electric Corporation Vnet/IP Interface Package
• CWE-130

iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-130

iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp

• InternationalColorConsortium iccDEV
• CWE-20
• CWE-130

iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

• InternationalColorConsortium iccDEV
• CWE-20
• CWE-130

iccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-20

Zlib compressed protocol header length confusion may allow memory read

• MongoDB Inc. MongoDB Server
• CWE-130

Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric…

• Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU
• Mitsubishi Electric Corporation MELSEC-Q Series Q04UDVCPU
• CWE-130

Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values

• Zephyr
• CWE-130

In multiple locations, there is a possible way to persistently DoS the device due to a missing length check.

• Google Android
• CWE-130

Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS
• CWE-130

Vulnerability of inadequate packet length check in the BLE module.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-130

Duplicate Advisory: Remotely exploitable denial of service in Rosenpass

• CWE-130

<0.2.1 · fixed in 0.2.1

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-130

Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header

• CWE-130

<0.10.4 · fixed in 0.10.4

NVIDIA CUDA Toolkit: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary…

• NVIDIA CUDA Toolkit
• CWE-130

NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

• Nameless
• CWE-20
• CWE-130

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

• Siemens TeleControl Server Basic
• CWE-130

Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic

• Juniper Networks Junos OS
• CWE-130

ConnMan: In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR…

• ConnMan
• CWE-130

Panics on Malformed Untrusted Input

• Denial of service
• CWE-130

>=0.0.0-0, <0.14.1 · fixed in 0.14.1

Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-130

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-servi...

• CWE-130

>=4.2, <4.2.15 || >=5.0, <5.0.8 · fixed in 4.2.15, 5.0.8

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs w...

• CWE-130

>=4.2, <4.2.15 || >=5.0, <5.0.8 · fixed in 4.2.15, 5.0.8

Elliptic's ECDSA missing check for whether leading bit of r and s is zero

• CWE-130

>=2.0.0, <6.5.7 · fixed in 6.5.7

A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device.

• Cisco Small Business RV Series Router Firmware
• CWE-130

Django vulnerable to Denial of Service

• Denial of service
• CWE-130

>=4.2, <4.2.14 || >=5.0, <5.0.7 · fixed in 4.2.14, 5.0.7

Django vulnerable to Denial of Service

• Denial of service
• CWE-130

>=4.2, <4.2.14 || >=5.0, <5.0.7 · fixed in 4.2.14, 5.0.7

Secure Boot Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-130

Secure Boot Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-130

Secure Boot Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-130

Secure Boot Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-130

Buffer overflow in deserialization in oqs-provider

• open-quantum-safe oqs-provider
• Memory corruption
• CWE-130

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26.

• Huawei CurieM-WFG9B
• CWE-130

Tor path lengths too short when "Vanguards lite" configured

• CWE-130
• CWE-670

>=0.18.0, <0.18.1 · fixed in 0.18.1

Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution.

• Honeywell Experion Server
• CWE-130

Azure Private 5G Core Denial of Service Vulnerability

• Microsoft Azure Private 5G Core
• CWE-130

Windows Hyper-V Denial of Service Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-130

Open Automation Software OAS Platform: A denial of service vulnerability exists in the OAS Engine File Data Source Configuration…

• Open Automation Software OAS Platform
• CWE-130

Out of memory error when submitting the dataset form with a specially-crafted field

• CWE-130

>=2.0, <2.9.10 || >=2.10.0, <2.10.3 · fixed in 2.9.10, 2.10.3

Remotely exploitable DoS condition in Rosenpass <=0.2.0

• CWE-130

>=0.0.0-0, <0.2.1 · fixed in 0.2.1

Jetty accepts "+" prefixed value in Content-Length

• CWE-130

>=9.0.0, <9.4.52 || >=10.0.0, <10.0.16 || >=11.0.0, <11.0.16 || >=12.0.0, <12.0.1 · fixed in 9.4.52, 10.0.16, 11.0.16, 12.0.1

Improper handling of NTS cookie length that could crash the ntpd-rs server

• CWE-130

>=0.3.0, <0.3.3 · fixed in 0.3.3

libslic3r: A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality…

• libslic3r
• CWE-130

Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-130

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Disco…

• Cisco Analog Telephone Adaptor (ATA) Software
• CWE-130

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Disco…

• Cisco Analog Telephone Adaptor (ATA) Software
• CWE-130

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute…

• Cisco Analog Telephone Adaptor (ATA) Software
• CWE-130

The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-130

Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability

• Cisco IOS XE Software
• CWE-130

L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

• IEEE 802.2
• draft-ietf-v6ops-ra-guard-08
• Authentication bypass
• CWE-130