CVE-2013-4292

libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service memory consumption via a large number of domain migrate parameters in certain RPC calls in 1 daemon/remote.c and 2 remote/remotedriver.c...

CVE-2013-4292

CVE-2013-4292 affects libvirt 1.1.0 and 1.1.1. Local users can cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1) daemon/remote.c and (2) remote/remote_driver.c. Exploitation details are not provided in the sources; the NVD e...

CVE-2013-4292

libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service memory consumption via a large number of domain migrate parameters in certain RPC calls in 1 daemon/remote.c and 2 remote/remotedriver.c...

PT-2013-1275

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue is related to the absence of input validation in the sub 0040F059 procedure at address 0x0040F092. This can lead to a stack buffer overflow when processing the RPC call numbe...

IceWarp 10.4.5 /rpc/gw.html 任意文件读取漏洞

No description provided by source...

PT-2013-1274

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue is related to the absence of input validation in the sub 40FF03 procedure at address 0x004100E0. This can lead to a stack buffer overflow when processing the RPC call number...

PT-2013-1273

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue is related to the absence of input validation in the sub 40E0B6 procedure at address 0x0040E10B, which can lead to a stack buffer overflow when processing the RPC call number...

PT-2013-1272

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue is related to the authentication procedure sub 41149F at address 0x0041150E, where a lack of input validation can lead to a stack buffer overflow when processing the RPC call...

libvirt: invalid free in remoteDispatchDomainMemoryStats

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and crash via a crafted RPC ca...

CVE-2013-4296

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and crash via a crafted RPC ca...

PT-2013-1271

Name of the Vulnerable Software and Affected Versions linstmgr.exe affected versions not specified Description The RPC server design assumes that client applications will always send correct data and behave as expected. However, sending incorrect data can cause program errors or execute arbitrary...

PT-2013-1270

Name of the Vulnerable Software and Affected Versions Linter Bastion versions affected versions not specified Description The issue arises from an incorrect assumption in the RPC server linstmgr.exe that only users with administrator rights can connect to the server. This oversight, combined with...

Microsoft Windows multiple security vulnerabilities

Unicode Scripts Processor memory corruption, RPC privilege escalation, kernel protection bypass and memory corruptions, IPv6 and NAT DoS...

Update to Bitcoin Client Fixes DoS Bug, Password Strength

The developers behind Bitcoin-QT, a software wallet used to protect and back up Bitcoin currency, have pushed out a new version of the client, fixing a critical denial-of-service bug, three security issues and fortifying password security. Version 0.8.4 of the original Bitcoin client was posted t...

Amazon Linux AMI : glibc (ALAS-2012-39)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code wi...

Amazon Linux AMI : python27 (ALAS-2012-81)

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of data than specified...

OpenStack: openstack-nova-compute console-log DoS

OpenStack Compute Nova Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service connection pool consumption, as demonstrated using multiple requests that send...

Apache HBase RPC身份验证中间人安全措施绕过漏洞(CVE-2013-2193)

BUGTRAQ ID: 61981 CVECAN ID: CVE-2013-2193 HBase是一个分布式、版本化、构建在Apache Hadoop和Apache ZooKeeper上的列数据库 HBase 0.92.x、0.94.x版本在实现上存在安全绕过漏洞，从客户端到Region服务器的RPC流量可能会被具有任务运行权限的恶意用户及集群容器截获。Apache HBase RPC协议用来提供客户端和服务器之间的双向身份验证。但是恶意服务器或网络攻击者可以单方面禁用这些身份验证检查。这可导致绕过RPC流量保护机制。如果通过RPC传递身份验证凭证，也可导致权限提升 0 Apache...

Computer Associates ARCserve Backup LDBserver Remote Code Execution Vulnerability

The version of CA ARCserve Backup installed in the remote hosted is affected by a remote code execution vulnerability. A remote attacker can exploit this vulnerability by providing a specially crafted handlet argument to an RPC endpoint for the LDBserver service. C Tenable Network Security, Inc...

Microsoft Windows 远程权限提升漏洞(CVE-2013-3175)(MS13-062)

BUGTRAQ ID: 61673 CVECAN ID: CVE-2013-3175 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows处理发给共享主机的畸形异步RPC请求时存在权限提升漏洞。成功利用此漏洞可执行任意代码并完全控制受影响系统。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows RT Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows 2003 厂商补...