Improper Handling of Syntactically Invalid Structure

The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.

CVEs (22)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-27847 1Linuxfoundation 1Dex Jun 17, 2026 May 28, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulner...Show more A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects dex versions before 2.27.0.Show less
CVE-2018-5381 4Canonical DebianQuagga+1 more 4Debian Linux QuaggaRuggedcom Rox Ii Firmware+1 more Jun 17, 2026 Feb 19, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid...Show more The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-27847

1Linuxfoundation

1Dex

Jun 17, 2026

May 28, 2021

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects dex versions before 2.27.0.Show less

CVE-2018-5381

4Canonical

DebianQuagga+1 more

4Debian Linux

QuaggaRuggedcom Rox Ii Firmware+1 more

Jun 17, 2026

Feb 19, 2018

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.Show less

Previous 12