Vulnerabilities (CVE)

Filtered by CWE-674
Total 224 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-11556 1 Libsass 1 Libsass 2023-12-10 5.0 MEDIUM 7.5 HIGH
There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service.
CVE-2017-11554 1 Libsass 1 Libsass 2023-12-10 5.0 MEDIUM 7.5 HIGH
There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service.
CVE-2017-5839 1 Gstreamer Project 1 Gstreamer 2023-12-10 5.0 MEDIUM 7.5 HIGH
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
CVE-2017-0886 1 Nextcloud 1 Nextcloud Server 2023-12-10 4.0 MEDIUM 6.5 MEDIUM
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.