CWE-130: length manipulation
The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
Also known as Improper Handling of Length Parameter Inconsistency, length tampering.
A kind of CWE-240 Improper Handling of Inconsistent Structural Elements.
From the CWE List. © The MITRE Corporation.
Newest
- open-quantum-safe oqs-provider, open quantum safe oqs provider +1 moreBuffer overflow in deserialization in oqs-provider8.2 High
- huawei curiem-wfg9b, curiem-wfg9b firmware +1 moreHuawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at the…7.8 High
articrates.io,tor-circmgrcrates.io +1 moreTor path lengths too short when "full Vanguards" configured7.3 Higharticrates.io,tor-circmgrcrates.io +1 moreTor Arti's STUB circuits incorrectly have a length of 26.2 Medium- honeywell experion serverServer receiving a malformed message that causes a disconnect to a hostname may causing a stack...7.4 High
- microsoft azure private 5g coreAzure Private 5G Core Denial of Service Vulnerability5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Hyper-V Denial of Service Vulnerability6.2 Medium
- open automation software oas platform, openautomationsoftware open automation software +1 moreA denial of service vulnerability exists in the OAS Engine File Data Source Configuration...4.9 Medium
- ckanCKAN out of memory error when submitting the dataset form with a specially-crafted field4.5 Medium
- rosenpassRemotely exploitable denial of service in Rosenpass5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty accepts "+" prefixed value in Content-Length5.3 Medium
- pendulum-project ntpd-rsImproper handling of NTS cookie length that could crash the ntpd-rs server7.5 High
- slic3r libslic3rA heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of...8.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash7.5 High
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA...5.3 Medium
- huawei emui, harmonyos +1 moreThe communication framework module has a vulnerability of not truncating data properly.Successful...7.5 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability8.6 High
- ieee 802.2, ietf draft-ietf-v6ops-ra-guard-08, p802.1q +2 moreL2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation4.7 Medium
- ieee 802.2, ietf draft-ietf-v6ops-ra-guard, p802.1q +2 moreL2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths4.7 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Handling of Length Parameter Inconsistency in ikus060/rdiffweb5.7 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Handling of Length Parameter Inconsistency in ikus060/rdiffweb5.3 Medium
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreImproper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis8.1 High
- objectcomputing openddsOCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency7.0 High
- erudika erudika/scoold, scoold +1 moreImproper handling of Length parameter in erudika/scoold9.3 Critical
- bitdefender endpoint security tools for linux, endpoint security tools for windows, endpoint security tools +2 more +4 moreImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)7.5 High
- arm mbed tls, debian linux +1 moreA Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the...7.5 High
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreDenial of service via HTTP/2 HEADERS frames padding7.5 High
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreswift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length7.5 High
- mitsubishi electric corporation melipc series mi5122-vw, melsec iq-r series r12ccpu-v, melsec l series l26cpu +121 more +123 moreImproper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01...7.5 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 moreAMD System Management Unit (SMU) may experience an integer overflow when an invalid length is...5.5 Medium
- zephyrproject zephyrTruncated L2CAP K-frame causes assertion failure4.3 Medium
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerability5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerability5.5 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerability7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerability7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerability7.5 High
- zephyrproject zephyrMissing Size Checks in Bluetooth HCI over SPI3.8 Low
- mitsubishi electric corporation cpu module logging configuration tool, cw configurator, data transfer +47 more +49 moreImproper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA...7.5 High
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli library5.3 Medium
- philips patient information center ix (picix), patient information center ix +1 morePhilips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...7.3 High
- moxa oncell g3110-hspa-t firmware, oncell g3110-hspa firmware, oncell g3150-hspa-t firmware +1 more +3 moreAn Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100...7.5 High