Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority MEDIUM 51

A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19255 Published 2022-02-09 No fix listed CWE-125
Priority MEDIUM 50

A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18178 Published 2022-02-09 No fix listed CWE-125
Priority HIGH 71

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44559 Published 2022-02-09 No fix listed CWE-120
Priority MEDIUM 48

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03463 Published 2022-02-09 No fix listed CWE-22
Priority MEDIUM 48

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Da…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03505 Published 2022-02-09 No fix listed CWE-22
Priority MEDIUM 46

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially cra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02227 Published 2022-02-09 No fix listed CWE-190