CVE-2023-46135

HIGH Year: 2023
CVSS v3 Score
7.5
High
Weakness Type
CWE-248
View all →

Vulnerability Description

rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.`inner_payload_len` should not above 64. This vulnerability has been patched in version 0.0.8.

Related Vulnerabilities

CVE-2016-10363

HIGH
CVSS:7.5(High)

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logs...

CWE-2482016

CVE-2019-10931

HIGH
CVSS:7.5(High)

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering softwa...

CWE-2482019

CVE-2019-6575

HIGH
CVSS:7.5(High)

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort Outdoo...

CWE-2482019

CVE-2019-6809

HIGH
CVSS:7.5(High)

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum ...

CWE-2482019

CVE-2019-6828

HIGH
CVSS:7.5(High)

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (...

CWE-2482019

CVE-2019-6829

HIGH
CVSS:7.5(High)

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service ...

CWE-2482019