Advisories · Weakness

CWE-130.

Every Advisory and CVE whose sources give the weakness CWE-130, newest first.

CVE-2021-27861 CVE record

CVSS 4.7 Medium

L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths
- IEEE 802.2
- draft-ietf-v6ops-ra-guard
- Authentication bypass
- CWE-130
Not analysed yet 27 Sept 2022
rdiffweb PyPI

CVSS 5.7 Medium

rdiffweb's unlimited username field length can lead to DoS
- CWE-130
<2.4.8 · fixed in 2.4.8

GHSA-5v95-j4rr-6f3c · CVE-2022-3290 Not analysed yet 27 Sept 2022
rdiffweb PyPI

CVSS 5.3 Medium

Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
- CWE-130
<2.4.8 · fixed in 2.4.8

GHSA-qrj3-hrgj-fm7r · CVE-2022-3272 Not analysed yet 26 Sept 2022
francoisjacquet/rosariosis Packagist

CVSS 8.1 High

RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency
- CWE-130
<10.1 · fixed in 10.1

GHSA-vh4m-mw8w-g4w8 · CVE-2022-2714 Not analysed yet 7 Sept 2022
compu-brotli-sys +117 crates.io

CVSS 5.3 Medium

Integer overflow in the bundled Brotli C library
- Memory corruption
- CWE-130
<1.0.9 · fixed in 1.0.9

GHSA-5v8v-66v8-mwm7 · CVE-2020-36846 Not analysed yet 24 May 2022
CVE-2021-38445 CVE record

CVSS 7.0 High

OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency
- OCI OpenDDS
- CWE-130
Not analysed yet 5 May 2022
CVE-2022-1543 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper handling of Length parameter in erudika/scoold
- erudika/scoold
- CWE-130
Not analysed yet 29 Apr 2022
CVE-2022-0677 CVE record

CVSS 7.5 High

Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)
- Bitdefender Update Server
- Bitdefender GravityZone
- CWE-130
Not analysed yet 7 Apr 2022
CVE-2021-43666 CVE record

CVSS 7.5 High

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.
- CWE-130
Not analysed yet 24 Mar 2022
CVE-2022-0618 CVE record

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame.
- Swift Project SwiftNIO HTTP2
- CWE-130
Not analysed yet 9 Mar 2022
CVE-2022-24666 CVE record

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame.
- Swift Project SwiftNIO HTTP2
- CWE-130
Not analysed yet 9 Feb 2022
CVE-2021-20610 CVE record

CVSS 7.5 High

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120S…
- Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU
- Mitsubishi Electric Corporation MELSEC iQ-R Series R01CPU
- CWE-130
Not analysed yet 1 Dec 2021
CVE-2021-26329 CVE record

AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-130
Not analysed yet 16 Nov 2021
CVE-2021-3454 CVE record

CVSS 4.3 Medium

Truncated L2CAP K-frame causes assertion failure
- zephyr
- Denial of service
- CWE-130
Not analysed yet 19 Oct 2021
org.apache.ant:ant Maven

CVSS 5.5 Medium

Improper Handling of Length Parameter Inconsistency in Apache Ant
- CWE-130
>=1.9.0, <1.9.16 || >=1.10.0, <1.10.11 · fixed in 1.9.16, 1.10.11

GHSA-5v34-g2px-j4fw · CVE-2021-36374 Not analysed yet 2 Aug 2021
org.apache.ant:ant Maven

CVSS 5.5 Medium

Improper Handling of Length Parameter Inconsistency in Apache Ant
- CWE-130
<1.9.16 || >=1.10.0, <1.10.11 · fixed in 1.9.16, 1.10.11

GHSA-q5r4-cfpx-h6fh · CVE-2021-36373 Not analysed yet 2 Aug 2021
org.apache.commons:commons-compress Maven

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Improper Handling of Length Parameter Inconsistency in Compress
- CWE-130
<1.21 · fixed in 1.21

GHSA-mc84-pj99-q6hh · CVE-2021-36090 Not analysed yet 2 Aug 2021
org.apache.commons:commons-compress Maven

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Improper Handling of Length Parameter Inconsistency in Compress
- Denial of service
- CWE-130
<1.21 · fixed in 1.21

GHSA-xqfj-vm6h-2x34 · CVE-2021-35517 Not analysed yet 2 Aug 2021
org.apache.commons:commons-compress Maven

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Improper Handling of Length Parameter Inconsistency in Compress
- Denial of service
- CWE-130
<1.21 · fixed in 1.21

GHSA-crv7-7245-f45f · CVE-2021-35516 Not analysed yet 2 Aug 2021
CVE-2020-10065 CVE record

CVSS 3.8 Low

Missing Size Checks in Bluetooth HCI over SPI
- zephyr
- CWE-130
Not analysed yet 24 May 2021
CVE-2021-20588 CVE record

CVSS 7.5 High

Mitsubishi Electric Corporation CPU Module Logging…: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric…
- Mitsubishi Electric Corporation CPU Module Logging Configuration Tool
- Mitsubishi Electric Corporation CW Configurator
- CWE-130
Not analysed yet 19 Feb 2021
CVE-2020-16224 CVE record

Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency
- Philips Patient Information Center iX (PICiX)
- CWE-130
Not analysed yet 11 Sept 2020
CVE-2019-0055 CVE record

CVSS 7.5 High

Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.
- Juniper Networks Junos OS
- CWE-130
Not analysed yet 9 Oct 2019
CVE-2019-3862 CVE record

CVSS 7.3 High

libssh2: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way…
- libssh2
- CWE-130
Not analysed yet 20 Mar 2019
CVE-2018-5453 CVE record

Moxa OnCell G3100-HSPA Series: An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa…
- Moxa OnCell G3100-HSPA Series
- CWE-130
Not analysed yet 5 Mar 2018