CWE-130: length manipulation
The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
Also known as Improper Handling of Length Parameter Inconsistency, length tampering.
A kind of CWE-240 Improper Handling of Inconsistent Structural Elements.
From the CWE List. © The MITRE Corporation.
Newest
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size5.9 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion8.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredlm: validate length in dlm_search_rsb_tree9.8 Critical
- djangoproject djangoPotential denial-of-service vulnerability in ASGI requests via file upload limit bypass6.3 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly7.5 High
- freebsdHeap overflow in libnv8.1 High
- moxa edr-8010 series, edr-g9010 series +1 moreAn improper handling of the length parameter inconsistency vulnerability has been identified in...8.7 High
- linux, linux kernel +1 morerxrpc: fix oversized RESPONSE authenticator length check7.5 High
- red hat fast datapath for red hat enterprise linux 10, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +3 more +5 moreOvn: ovn: information disclosure via crafted dhcpv6 packets8.6 High
- red hat fast datapath for red hat enterprise linux 10, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +3 more +5 moreOvn: ovn: heap over-read in icmp error response generation6.5 Medium
- rust-opensslrust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer8.3 High
- samba rsync, red hat discovery 2, enterprise linux 10 +24 more +26 moreIn rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...7.4 High
- haproxyAn issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the...4.0 Medium
- stigtsp net::cidr::lite, net\ +1 moreNet::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass6.5 Medium
- rackRack: Content-Length mismatch in Rack::Files error responses4.8 Medium
- tlsfuzzer ecdsa, python-ecdsa +1 morepython-ecdsa: Denial of Service via improper DER length validation in crafted private keys5.3 Medium
- mozilla thunderbird, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreOut of bounds read in IMAP parsing7.4 High
- siemens sicam siapp sdkA vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP...5.9 Medium
- siemens sicam siapp sdkA vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP...5.9 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- haproxy aloha, haproxy, haproxy enterprise +2 moreHAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN...4.8 Medium
- color iccdeviccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp8.8 High
- color iccdeviccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp8.8 High
- color iccdeviccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp8.8 High
- color iccdeviccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp8.8 High
- mongodb, mongodb and mongodb server, mongodb inc. server +1 more +3 moreZlib compressed protocol header length confusion may allow memory read8.7 High
- mitsubishi electric corporation melsec-q series q03udvcpu, melsec-q series q04udpvcpu, melsec-q series q04udvcpu +6 more +8 moreImproper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...6.8 Medium
- zephyrproject zephyrBluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values7.6 High
- mitsubishi electric corporation melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es, melsec iq-f series fx5s-30mt/ds +72 more +74 moreDenial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of inadequate packet length check in the BLE module. Impact: Successful...5.1 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash7.1 High
- google androidIn multiple locations, there is a possible way to persistently DoS the device due to a missing...5.5 Medium
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a...4.4 Medium
- namelessmc namelessNamelessMC Has Lack of Length Validation for s Parameter in GET Requests7.5 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...6.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic8.7 High
- connmanIn ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR...4.8 Medium
- pimeys web-pushRust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header4.0 Medium
- rpgprPGP Panics on Malformed Untrusted Input7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this...4.7 Medium
- djangoproject djangoDjango vulnerable to denial-of-service attack7.5 High
- djangoproject djangoDjango vulnerable to a denial-of-service attack7.5 High
- elliptic project ellipticElliptic's ECDSA missing check for whether leading bit of r and s is zero5.3 Medium
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 moreA vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could...6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- djangoproject djangoDjango vulnerable to Denial of Service7.5 High
- djangoproject djangoDjango vulnerable to Denial of Service7.5 High
- Show moreLoading…