A flaw was found in the src/list.c of tar 1.33 and earlier. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. This Memory Leak vulnerability could allow attackers to exhaust available memory leading to denial of service.
Information Disclosure
Tar
NVD
CVSS 3.1
3.3
EPSS
1.1%
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.
Denial Of Service
Univerge Aspire Wx Firmware
Univerge Aspire Ux Firmware
Univerge Sv9100 Firmware
Sl2100 Firmware
NVD
CVSS 3.1
3.1
EPSS
0.9%