Oracle

Zfs Storage Appliance Kit

108 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.4

CVE-2021-3712

Warning
  • EPSS 0.82%
  • Published 24.08.2021 15:15:09
  • Last modified 21.11.2024 06:22:13

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the s...

7.5

CVE-2021-36690

Exploit
  • EPSS 0.98%
  • Published 24.08.2021 14:15:09
  • Last modified 21.11.2024 06:13:55

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already ha...

7.5

CVE-2021-33193

Exploit
  • EPSS 0.94%
  • Published 16.08.2021 08:15:11
  • Last modified 01.05.2025 15:40:12

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

6.5

CVE-2021-3541

  • EPSS 0.07%
  • Published 09.07.2021 17:15:07
  • Last modified 21.11.2024 06:21:48

A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

7.5

CVE-2021-33503

  • EPSS 0.86%
  • Published 29.06.2021 11:15:07
  • Last modified 21.11.2024 06:08:58

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed ...

7.5

CVE-2021-31618

  • EPSS 18.52%
  • Published 15.06.2021 09:15:07
  • Last modified 21.11.2024 06:06:02

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is se...

5.3

CVE-2019-17567

  • EPSS 9.56%
  • Published 10.06.2021 07:15:07
  • Last modified 21.11.2024 04:32:32

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to p...

7.5

CVE-2020-13950

  • EPSS 17.37%
  • Published 10.06.2021 07:15:07
  • Last modified 21.11.2024 05:02:13

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

7.3

CVE-2020-35452

  • EPSS 14.97%
  • Published 10.06.2021 07:15:07
  • Last modified 21.11.2024 05:27:18

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particula...

7.5

CVE-2021-26690

  • EPSS 71.33%
  • Published 10.06.2021 07:15:07
  • Last modified 21.11.2024 05:56:40

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service