Most recent entries from all

bdu:2024-01219

certfr-2024-avi-0575 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent…

certfr-2024-avi-0575

cnvd-2018-21732

EUVD-2026-184349

fkie_cve-2018-3737

sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.

GHSA-2m39-62fm-q8r3 — Regular Expression Denial of Service in sshpk

Affected: npm: sshpk

Versions of `sshpk` before 1.13.2 or 1.14.1 are vulnerable to regular expression denial of service when parsing crafted invalid public keys.

## Recommendation

Update to version 1.13.2, 1.14.1 or later.

gsd-2018-3737

RHSA-2020:2625 — Red Hat Security Advisory: rh-nodejs8-nodejs security update

nodejs-brace-expansion: Regular expression denial of service nodejs-chownr: TOCTOU vulnerability in `chownr` function in chownr.js nodejs-sshpk: ReDoS when parsing crafted invalid public keys in lib/formats/ssh.js nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties npm: Symlink reference outside of node_modules folder through the bin field upon installation npm: Arbitrary file write via constructed entry in the package.json bin field npm: Global node_modules Binary Overwrite

UBUNTU-CVE-2018-3737

Affected: Ubuntu:18.04:LTS: node-sshpk

sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.

WID-SEC-W-2024-1591 — Juniper JUNOS: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.