Search CVE reports

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake...

(jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolle ...)

(A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...)

(A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...)

(A flaw was found in FreeIPA. A low-privilege authenticated user can ex ...)

(msgpack_unpacker_expand_buffer in src/unpack.c, reached through the pu ...)

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables...

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header...

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes is_secure_string()...

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16_t...