CWE-130

Improper Handling of Length Parameter Inconsistency

Parent: CWE-240 - Improper Handling of Inconsistent Structural Elements

The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

93 vulnerabilities with CWE-130
CVE-2024-35313 HIGH
Tor Arti < 1.2.3 - Improper Handling of Length Parameter Inconsistency
CVSS 7.3
CVE-2024-29064 MEDIUM
Windows Hyper-V - Denial of Service via Length Parameter Inconsistency
CVSS 6.2
CVE-2024-20685 MEDIUM
Azure Private 5G Core < 2403.0-2 - Denial of Service
CVSS 5.9
CVE-2024-24976 MEDIUM
Open Automation Software OAS Platform <19.00.0057 - DoS
CVSS 4.9
CVE-2023-53157 MEDIUM
rosenpass < 0.2.1 - Denial of Service via One-Byte UDP Packet
CVSS 5.3
CVE-2023-52547 HIGH
Huawei Matebook D16 CREM-WXX9 BIOS v2.26 - Memory Corruption in SMI Handler
CVSS 7.8
CVE-2023-5393 HIGH
Honeywell Experion Server - Stack Overflow and Remote Code Execution via Malformed Hostname Message
CVSS 7.4
CVE-2023-50248 MEDIUM
CKAN <2.9.10-2.10.3 - Memory Corruption
CVSS 4.5
CVE-2023-40167 MEDIUM
Jetty <9.4.52-12.0.1 - Info Disclosure
CVSS 5.3
CVE-2023-33192 HIGH
ntpd-rs 0.3.0-0.3.2 - Denial of Service via NTS Cookie Length Mismatch
CVSS 7.5
CVE-2023-28964 HIGH
Juniper Networks Junos OS/Junos OS Evolved - DoS
CVSS 7.5
CVE-2022-36788 HIGH
libslic3r 1.3.0 and Master Commit b1a5500 - Heap-Based Buffer Overflow via Crafted STL File
CVSS 8.1
CVE-2022-20690 MEDIUM
Cisco ATA 190 Series - Memory Corruption
CVSS 5.3
CVE-2022-20689 MEDIUM
Cisco ATA 190 Series - Memory Corruption
CVSS 5.3
CVE-2022-20686 MEDIUM
Cisco ATA 190/191/192 Firmware - Unauthenticated Remote Code Execution and Denial of Service via LLDP Packet Header
CVSS 5.3
CVE-2022-41586 HIGH
Communication Framework - Info Disclosure
CVSS 7.5
CVE-2022-20870 HIGH
Cisco IOS XE - Denial of Service via Malformed MPLS Egress Packet
CVSS 8.6
CVE-2022-3290 HIGH
GitHub ikus060/rdiffweb <2.4.8 - Info Disclosure
CVSS 7.5
CVE-2022-3272 HIGH
GitHub ikus060/rdiffweb <2.4.8 - Info Disclosure
CVSS 7.5
CVE-2022-2714 CRITICAL
GitHub francoisjacquet/rosariosis <10.0 - Info Disclosure
CVSS 9.8
CVE-2022-1543 HIGH
erudika/scoold <1.49.4 - Memory Corruption
CVSS 8.8
CVE-2022-0677 HIGH
Bitdefender Update Server <3.4.0.276 - DoS
CVSS 7.5
CVE-2022-0618 HIGH
swift-nio-http2 1.0.0-1.19.9 - Denial of Service via Malformed HTTP/2 HEADERS or PUSH_PROMISE Frame
CVSS 7.5
CVE-2022-24666 HIGH
swift-nio-http2 1.0.0-1.19.1 - Denial of Service via Malformed HTTP/2 HEADERS Frame
CVSS 7.5
CVE-2021-27862 MEDIUM
IEEE 802.2 < 802.2h-1997 - Authentication Bypass via LLC/SNAP Header Spoofing
CVSS 4.7
Details
Vulnerabilities 93
Links
MITRE CWE Entry Search this CWE With Exploits