Common Weakness Enumeration
CWE-839
Weakness AllowedNumeric Range Comparison Without Minimum Check
Abstraction: Base · Status: Incomplete
The product checks a value to ensure that it is less than or equal to a maximum, but it does not also verify that the value is greater than or equal to the minimum.
Mapping guidance
This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
Relationships and members
Modes of introduction
Implementation
Some products use signed integers or floats even when their values are only expected to be positive or 0. An input validation check might assume that the value is positive, and only check for the maximum value.
Detection methods
Automated Static Analysis
Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
Content history
Submission: CWE Content Team
· MITRE
· 2011-03-24
· CWE 1.12
Modification: CWE Content Team
· MITRE
· 2011-06-01
· CWE 1.13
updated Common_Consequences
Modification: CWE Content Team
· MITRE
· 2012-05-11
· CWE 2.2
updated Demonstrative_Examples, References, Relationships
Modification: CWE Content Team
· MITRE
· 2014-02-18
· CWE 2.6
updated Relationships
Modification: CWE Content Team
· MITRE
· 2018-03-27
· CWE 3.1
updated Description
Modification: CWE Content Team
· MITRE
· 2019-01-03
· CWE 3.2
updated Relationships
Modification: CWE Content Team
· MITRE
· 2023-01-31
· CWE 4.10
updated Alternate_Terms, Description
Modification: CWE Content Team
· MITRE
· 2023-04-27
· CWE 4.11
updated Relationships
Modification: CWE Content Team
· MITRE
· 2023-06-29
· CWE 4.12
updated Mapping_Notes
Modification: CWE Content Team
· MITRE
· 2023-10-26
· CWE 4.13
updated Observed_Examples
Modification: CWE Content Team
· MITRE
· 2025-09-09
· CWE 4.18
updated Demonstrative_Examples
Modification: CWE Content Team
· MITRE
· 2025-12-11
· CWE 4.19
updated Detection_Factors, Time_of_Introduction, Weakness_Ordinalities
Modification: CWE Content Team
· MITRE
· 2026-10-28
· CWE 5.0
updated Common_Consequences, Description, Modes_of_Introduction, Relationships
15 vulnerabilities reference this CWE, most recent first.
CVE-2026-129248 (GCVE-0-2026-129248)
Vulnerability from cvelistv5 – Published: 2026-11-14 10:45 – Updated: 2026-11-14 10:45
VLAI
EPSS
VEX
Title
Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check
Summary
A weakness has been identified in Akaunting up to 3.3.0. The affected element is the function calculation_to_quantity of the file helpers.php of the component Invoice Item Validation. Executing a manipulation of the argument quantity can lead to numeric range comparison without minimum check. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/437279 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/437279/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-129248 | third-party-advisory |
| https://vuldb.com/submit/1025027 | third-party-advisory |
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:akaunting:akaunting:*:*:*:*:*:*:*:*"
],
"modules": [
"Invoice Item Validation"
],
"product": "Akaunting",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Raygun (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Akaunting up to 3.3.0. The affected element is the function calculation_to_quantity of the file helpers.php of the component Invoice Item Validation. Executing a manipulation of the argument quantity can lead to numeric range comparison without minimum check. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-118",
"description": "Range Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-14T10:45:18.570Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-437279 | Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/437279"
},
{
"name": "VDB-437279 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/437279/cti"
},
{
"name": "CVE-2026-129248 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-129248"
},
{
"name": "Submit #1025027 | Akaunting akaunting (+ link https://akaunting.com / https://github.com/akaunting/akaunting 3.2.4 (tested); HEAD 06dfa47 (code-identical) Improper Input Validation (CWE-20, CWE-839): invoice quantity wi",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1025027"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-13T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-13T20:34:55.000Z",
"value": "VulDB entry last update"
}
],
"title": "Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-129248",
"datePublished": "2026-11-14T10:45:18.570Z",
"dateReserved": "2026-11-13T19:29:49.893Z",
"dateUpdated": "2026-11-14T10:45:18.570Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-118384 (GCVE-0-2026-118384)
Vulnerability from cvelistv5 – Published: 2026-10-28 02:53 – Updated: 2026-11-02 17:10
VLAI
EPSS
VEX
Summary
GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-02 17:09 UTC
CWE
- CWE-839 - Numeric Range Comparison Without Minimum Check
Assigner
References
6 references
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-10-31T03:06:13.418Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/10/31/1"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-118384",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-02T17:09:51.824138Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T17:10:04.070Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"mdir",
"mcopy"
],
"product": "mtools",
"programFiles": [
"vfat.c"
],
"vendor": "GNU",
"versions": [
{
"lessThan": "4.0.50",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "CWE-839 Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-31T15:14:13.418Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/deepin-community/mtools/blob/16d295331a1cfbcf02ad0b2f03c9b906197cf3ee/vfat.c#L444-L445"
},
{
"tags": [
"product"
],
"url": "https://github.com/deepin-community/mtools/blob/16d295331a1cfbcf02ad0b2f03c9b906197cf3ee/vfat.c#L399"
},
{
"url": "https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00002.html"
},
{
"url": "https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00004.html"
},
{
"url": "https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00001.html"
}
],
"x_generator": {
"engine": "CVE-Request-form 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2026-118384",
"datePublished": "2026-10-28T02:53:38.786Z",
"dateReserved": "2026-10-28T02:53:38.394Z",
"dateUpdated": "2026-11-02T17:10:04.070Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57186 (GCVE-0-2026-57186)
Vulnerability from cvelistv5 – Published: 2026-10-27 21:21 – Updated: 2026-10-28 16:13
VLAI
EPSS
VEX
Title
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
Summary
Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-28 15:54 UTC
CWE
- CWE-839 - Numeric Range Comparison Without Minimum Check
Assigner
References
11 references
| URL | Tags |
|---|---|
| https://github.com/asterisk/asterisk/security/adv… | x_refsource_CONFIRM |
| https://github.com/asterisk/asterisk/commit/07b97… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/commit/0e776… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/commit/42d35… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/commit/46c6c… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/commit/62a7a… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/releases/tag… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/releases/tag… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/releases/tag… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/releases/tag… | x_refsource_MISC |
| https://github.com/asterisk/asterisk/tree/24.0.0-pre1 | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| asterisk | asterisk |
Affected:
>= 21.0.0-pre1, < 21.12.3
Affected: >= 22.0.0-pre1, < 22.10.1 Affected: >= 23.0.0-pre1, < 23.4.1 |
|
| asterisk | certified-asterisk |
Affected:
>= 22.8-cert1-pre1, < 22.8-cert3
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57186",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-28T15:54:28.501669Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T16:13:12.086Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "asterisk",
"vendor": "asterisk",
"versions": [
{
"status": "affected",
"version": "\u003e= 21.0.0-pre1, \u003c 21.12.3"
},
{
"status": "affected",
"version": "\u003e= 22.0.0-pre1, \u003c 22.10.1"
},
{
"status": "affected",
"version": "\u003e= 23.0.0-pre1, \u003c 23.4.1"
}
]
},
{
"product": "certified-asterisk",
"vendor": "asterisk",
"versions": [
{
"status": "affected",
"version": "\u003e= 22.8-cert1-pre1, \u003c 22.8-cert3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "CWE-839: Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T21:21:55.833Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2"
},
{
"name": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c"
},
{
"name": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164"
},
{
"name": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033"
},
{
"name": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998"
},
{
"name": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f"
},
{
"name": "https://github.com/asterisk/asterisk/releases/tag/21.12.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/releases/tag/21.12.3"
},
{
"name": "https://github.com/asterisk/asterisk/releases/tag/22.10.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/releases/tag/22.10.1"
},
{
"name": "https://github.com/asterisk/asterisk/releases/tag/23.4.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/releases/tag/23.4.1"
},
{
"name": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3"
},
{
"name": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1"
}
],
"source": {
"advisory": "GHSA-h5hv-jmgj-92q2",
"discovery": "UNKNOWN"
},
"title": "Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-57186",
"datePublished": "2026-10-27T21:21:55.833Z",
"dateReserved": "2026-06-24T01:47:55.287Z",
"dateUpdated": "2026-10-28T16:13:12.086Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-56968 (GCVE-0-2026-56968)
Vulnerability from cvelistv5 – Published: 2026-06-23 16:18 – Updated: 2026-07-31 05:10
VLAI
EPSS
VEX
Summary
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-23 17:31 UTC
CWE
- CWE-839 - Numeric Range Comparison Without Minimum Check
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-56968",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-23T17:31:41.785915Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-23T17:31:49.772Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-07-31T05:10:08.575Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2026/07/msg00049.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "GNU SASL",
"vendor": "GNU",
"versions": [
{
"lessThan": "2.2.4",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:gnu_sasl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.2.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "CWE-839 Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-23T16:18:29.150Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00000.html"
},
{
"url": "https://lists.debian.org/debian-security-announce/2026/msg00259.html"
},
{
"url": "https://ftp.gnu.org/gnu/gsasl/"
},
{
"url": "https://www.gnu.org/software/gsasl/"
}
],
"x_generator": {
"engine": "CVE-Request-form 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2026-56968",
"datePublished": "2026-06-23T16:18:29.150Z",
"dateReserved": "2026-06-23T16:18:28.745Z",
"dateUpdated": "2026-07-31T05:10:08.575Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48840 (GCVE-0-2026-48840)
Vulnerability from cvelistv5 – Published: 2026-05-30 01:50 – Updated: 2026-06-05 09:07 X_Open Source
VLAI
EPSS
VEX
Summary
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-01 12:51 UTC
CWE
- CWE-839 - Numeric Range Comparison Without Minimum Check
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-06-05T09:07:37.892Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/05/29/3"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2026/06/msg00004.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-48840",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T12:51:07.836512Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T12:51:18.705Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exim",
"repo": "https://code.exim/org/exim/exim",
"vendor": "Exim",
"versions": [
{
"lessThan": "4.99.4",
"status": "affected",
"version": "4.88",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.99.4",
"versionStartIncluding": "4.88",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "CWE-839 Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-30T01:50:42.637Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1"
},
{
"url": "https://www.openwall.com/lists/oss-security/2026/05/29/3"
}
],
"tags": [
"x_open-source"
],
"x_generator": {
"engine": "CVE-Request-form 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2026-48840",
"datePublished": "2026-05-30T01:50:42.637Z",
"dateReserved": "2026-05-25T17:51:46.146Z",
"dateUpdated": "2026-06-05T09:07:37.892Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-0425 (GCVE-0-2023-0425)
Vulnerability from cvelistv5 – Published: 2023-08-07 05:06 – Updated: 2024-12-04 15:38
VLAI
EPSS
VEX
Title
Buffer overflow in global memory region
Summary
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves
the reported vulnerabilities in the product versions under maintenance.
An attacker who successfully exploited one or more of these vulnerabilities could cause the product to
stop or make the product inaccessible.
Numeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects:
Freelance controllers AC 700F:
from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1;
Freelance controllers AC 900F:
Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-12-04 15:30 UTC
CWE
- CWE-839 - Numeric Range Comparison Without Minimum Check
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| ABB | Freelance controllers AC 700F |
Affected:
9.0;0 , ≤ V9.2 SP2
(custom)
Affected: 0 , ≤ Freelance 2013 (custom) Affected: 0 , ≤ Freelance 2013SP1 (custom) Affected: 0 , ≤ Freelance 2016 (custom) Affected: 0 , ≤ Freelance 2016SP1 (custom) Affected: 0 , ≤ Freelance 2019 (custom) Affected: 0 , ≤ Freelance 2019 SP1 (custom) Affected: 0 , ≤ Freelance 2019 SP1 FP1 (custom) |
|
| ABB | Freelance controllers AC 900F |
Affected:
0 , ≤ Freelance 2013
(custom)
Affected: 0 , ≤ Freelance 2013SP1 (custom) Affected: 0 , ≤ Freelance 2016 (custom) Affected: 0 , ≤ Freelance 2016SP1 (custom) Affected: 0 , ≤ Freelance 2019 (custom) Affected: 0 , ≤ Freelance 2019 SP1 (custom) Affected: 0 , ≤ Freelance 2019 SP1 FP1 (custom) |
|
| abb | freelance_controllers_ac_700f |
Affected:
9.0.0 , ≤ 9.2_sp2
(custom)
Affected: 0 , ≤ freelance2013 (custom) Affected: 0 , ≤ freelance2013sp1 (custom) Affected: 0 , ≤ freelance2016 (custom) Affected: 0 , ≤ freelance2016sp1 (custom) Affected: 0 , ≤ freelance2019 (custom) Affected: 0 , ≤ freelance2019sp1 (custom) Affected: 0 , ≤ freelance2019sp1_fp1 (custom) cpe:2.3:h:abb:freelance_controllers_ac_700f:*:*:*:*:*:*:*:* |
|
| abb | freelance_controllers_ac_900f |
Affected:
0 , ≤ freelance2013
(custom)
Affected: 0 , ≤ freelance2013sp1 (custom) Affected: 0 , ≤ freelance2016 (custom) Affected: 0 , ≤ freelance2016sp1 (custom) Affected: 0 , ≤ freelance2019 (custom) Affected: 0 , ≤ freelance2019sp1 (custom) Affected: 0 , ≤ freelance2019sp1_fp1 (custom) cpe:2.3:h:abb:freelance_controllers_ac_900f:*:*:*:*:*:*:*:* |
Date Public
2023-08-03 18:30
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:10:55.771Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\u0026_ga=2.68514131.339223974.1691382343-1911411808.1686627590"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:h:abb:freelance_controllers_ac_700f:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "freelance_controllers_ac_700f",
"vendor": "abb",
"versions": [
{
"lessThanOrEqual": "9.2_sp2",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2013",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2013sp1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2016",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2016sp1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2019",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2019sp1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2019sp1_fp1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:abb:freelance_controllers_ac_900f:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "freelance_controllers_ac_900f",
"vendor": "abb",
"versions": [
{
"lessThanOrEqual": "freelance2013",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2013sp1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2016",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2016sp1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2019",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2019sp1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "freelance2019sp1_fp1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-0425",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-04T15:30:40.983809Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-04T15:38:30.902Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"Controller"
],
"product": " Freelance controllers AC 700F",
"vendor": "ABB",
"versions": [
{
"lessThanOrEqual": "V9.2 SP2",
"status": "affected",
"version": "9.0;0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2013",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2013SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2016",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2016SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2019",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2019 SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2019 SP1 FP1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"controller"
],
"product": " Freelance controllers AC 900F",
"vendor": "ABB",
"versions": [
{
"lessThanOrEqual": "Freelance 2013",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2013SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2016",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2016SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2019",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2019 SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "Freelance 2019 SP1 FP1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "ABB thanks Nataliya Tlyapova and Denis Goryushev (Positive Technologies) for responsibly reporting the vulnerabilities and working with us as we addressed them."
}
],
"datePublic": "2023-08-03T18:30:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\nABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves\nthe reported vulnerabilities in the product versions under maintenance.\nAn attacker who successfully exploited one or more of these vulnerabilities could cause the product to\nstop or make the product inaccessible.\u0026nbsp;\u003cbr\u003e\u003cbr\u003eNumeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).\u003cp\u003eThis issue affects:\u003c/p\u003e\u003cp\u003eFreelance controllers AC 700F:\u0026nbsp;\u003c/p\u003e\u003cp\u003efrom 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1;\u0026nbsp;\u003c/p\u003e\u003cp\u003eFreelance controllers AC 900F:\u0026nbsp;\u003c/p\u003e\u003cp\u003eFreelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.\u003c/p\u003e"
}
],
"value": "\nABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves\nthe reported vulnerabilities in the product versions under maintenance.\nAn attacker who successfully exploited one or more of these vulnerabilities could cause the product to\nstop or make the product inaccessible.\u00a0\n\nNumeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects:\n\nFreelance controllers AC 700F:\u00a0\n\nfrom 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1;\u00a0\n\nFreelance controllers AC 900F:\u00a0\n\nFreelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "CWE-839 Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-08-07T05:23:54.031Z",
"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
"shortName": "ABB"
},
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\u0026_ga=2.68514131.339223974.1691382343-1911411808.1686627590"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Buffer overflow in global memory region",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\nABB has tested the following workarounds. Although these workarounds will not correct the underlying\nvulnerabilities, they can help block known attack vectors.\nCVE-2023-0425: Buffer Overflow\nWe recommend disabling the webserver when not needed. The webserver is disabled by default\nfrom Freelance 2019 SP1 FP1 on (see Release Notes 2PAA124716-112).\n\n\u003cbr\u003e"
}
],
"value": "\nABB has tested the following workarounds. Although these workarounds will not correct the underlying\nvulnerabilities, they can help block known attack vectors.\nCVE-2023-0425: Buffer Overflow\nWe recommend disabling the webserver when not needed. The webserver is disabled by default\nfrom Freelance 2019 SP1 FP1 on (see Release Notes 2PAA124716-112).\n\n\n"
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
"assignerShortName": "ABB",
"cveId": "CVE-2023-0425",
"datePublished": "2023-08-07T05:06:46.584Z",
"dateReserved": "2023-01-20T10:59:16.973Z",
"dateUpdated": "2024-12-04T15:38:30.902Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2019-20925 (GCVE-0-2019-20925)
Vulnerability from cvelistv5 – Published: 2020-11-24 11:00 – Updated: 2024-09-16 23:45
VLAI
EPSS
VEX
Title
Denial of service via malformed network packet
Summary
An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.
Severity
7.5 (High)
CWE
- CWE-839 - Numeric Range Comparison Without Minimum Check
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://jira.mongodb.org/browse/SERVER-43751 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| MongoDB Inc. | MongoDB Server |
Affected:
4.2 , < 4.2.1
(custom)
Affected: 4.0 , < 4.0.13 (custom) Affected: 3.6 , < 3.6.15 (custom) Affected: 3.4 , < 3.4.24 (custom) |
Date Public
2020-11-24 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:00:17.403Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jira.mongodb.org/browse/SERVER-43751"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MongoDB Server",
"vendor": "MongoDB Inc.",
"versions": [
{
"lessThan": "4.2.1",
"status": "affected",
"version": "4.2",
"versionType": "custom"
},
{
"lessThan": "4.0.13",
"status": "affected",
"version": "4.0",
"versionType": "custom"
},
{
"lessThan": "3.6.15",
"status": "affected",
"version": "3.6",
"versionType": "custom"
},
{
"lessThan": "3.4.24",
"status": "affected",
"version": "3.4",
"versionType": "custom"
}
]
}
],
"datePublic": "2020-11-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.\u003c/p\u003e"
}
],
"value": "An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-839",
"description": "CWE-839: Numeric Range Comparison Without Minimum Check",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-23T15:04:48.719Z",
"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"shortName": "mongodb"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jira.mongodb.org/browse/SERVER-43751"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "Denial of service via malformed network packet",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cna@mongodb.com",
"DATE_PUBLIC": "2020-11-24T17:00:00.000Z",
"ID": "CVE-2019-20925",
"STATE": "PUBLIC",
"TITLE": "Denial of service via malformed network packet"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "MongoDB Server",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.2",
"version_value": "4.2.1"
},
{
"version_affected": "\u003c",
"version_name": "4.0",
"version_value": "4.0.13"
},
{
"version_affected": "\u003c",
"version_name": "3.6",
"version_value": "3.6.15"
},
{
"version_affected": "\u003c",
"version_name": "3.4",
"version_value": "3.4.24"
}
]
}
}
]
},
"vendor_name": "MongoDB Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.1; v4.0 versions prior to 4.0.13; v3.6 versions prior to 3.6.15; v3.4 versions prior to 3.4.24."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-839: Numeric Range Comparison Without Minimum Check"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.mongodb.org/browse/SERVER-43751",
"refsource": "MISC",
"url": "https://jira.mongodb.org/browse/SERVER-43751"
}
]
},
"source": {
"discovery": "INTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
"assignerShortName": "mongodb",
"cveId": "CVE-2019-20925",
"datePublished": "2020-11-24T11:00:16.027Z",
"dateReserved": "2020-10-06T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:45:46.251Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
GHSA-2463-G988-QQPJ
Vulnerability from github – Published: 2023-08-07 06:30 – Updated: 2024-04-04 06:35
VLAI
Details
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make the product inaccessible.
Numeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects:
Freelance controllers AC 700F:
from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1;
Freelance controllers AC 900F:
Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.
Severity
8.6 (High)
{
"affected": [],
"aliases": [
"CVE-2023-0425"
],
"database_specific": {
"cwe_ids": [
"CWE-839"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-08-07T06:15:10Z",
"severity": "HIGH"
},
"details": "\nABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves\nthe reported vulnerabilities in the product versions under maintenance.\nAn attacker who successfully exploited one or more of these vulnerabilities could cause the product to\nstop or make the product inaccessible.\u00a0\n\nNumeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects:\n\nFreelance controllers AC 700F:\u00a0\n\nfrom 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1;\u00a0\n\nFreelance controllers AC 900F:\u00a0\n\nFreelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.\n\n",
"id": "GHSA-2463-g988-qqpj",
"modified": "2024-04-04T06:35:32Z",
"published": "2023-08-07T06:30:28Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0425"
},
{
"type": "WEB",
"url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\u0026_ga=2.68514131.339223974.1691382343-1911411808.1686627590"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-2QGP-6C6G-CMWV
Vulnerability from github – Published: 2026-06-23 18:31 – Updated: 2026-07-31 06:30
VLAI
Details
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.
Severity
{
"affected": [],
"aliases": [
"CVE-2026-56968"
],
"database_specific": {
"cwe_ids": [
"CWE-839",
"CWE-908"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-06-23T17:17:09Z",
"severity": "LOW"
},
"details": "GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.",
"id": "GHSA-2qgp-6c6g-cmwv",
"modified": "2026-07-31T06:30:27Z",
"published": "2026-06-23T18:31:43Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56968"
},
{
"type": "WEB",
"url": "https://ftp.gnu.org/gnu/gsasl"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2026/07/msg00049.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-security-announce/2026/msg00259.html"
},
{
"type": "WEB",
"url": "https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00000.html"
},
{
"type": "WEB",
"url": "https://www.gnu.org/software/gsasl"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-9H57-5H59-G528
Vulnerability from github – Published: 2026-10-28 03:31 – Updated: 2026-10-31 18:30
VLAI
Details
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
Severity
6.1 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-118384"
],
"database_specific": {
"cwe_ids": [
"CWE-839"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-28T03:17:14Z",
"severity": "MODERATE"
},
"details": "GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.",
"id": "GHSA-9h57-5h59-g528",
"modified": "2026-10-31T18:30:21Z",
"published": "2026-10-28T03:31:52Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118384"
},
{
"type": "WEB",
"url": "https://ftp.gnu.org/gnu/mtools/mtools-4.0.49.tar.gz"
},
{
"type": "WEB",
"url": "https://github.com/deepin-community/mtools/blob/16d295331a1cfbcf02ad0b2f03c9b906197cf3ee/vfat.c#L399"
},
{
"type": "WEB",
"url": "https://github.com/deepin-community/mtools/blob/16d295331a1cfbcf02ad0b2f03c9b906197cf3ee/vfat.c#L444-L445"
},
{
"type": "WEB",
"url": "https://lists.gnu.org/archive/html/info-gnu/2025-06/msg00004.html"
},
{
"type": "WEB",
"url": "https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00001.html"
},
{
"type": "WEB",
"url": "https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00002.html"
},
{
"type": "WEB",
"url": "https://lists.gnu.org/archive/html/info-mtools/2026-10/msg00004.html"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2026/10/31/1"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"type": "CVSS_V3"
}
]
}
Mitigation
Implementation
Strategy: Enforcement by Conversion
If the number to be used is always expected to be positive, change the variable type from signed to unsigned or size_t.
Mitigation
Implementation
Strategy: Input Validation
If the number to be used could have a negative value based on the specification (thus requiring a signed value), but the number should only be positive to preserve code correctness, then include a check to ensure that the value is positive.
No CAPEC attack patterns related to this CWE.