Linux kernel denial of service vulnerability (CNVD-2018-06474)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'unimacmdioprobe' function in the drivers/net/phy/mdio-bcm-unimac.c file in Linux kernel 4.15.8 and earlier, which stems from a...

MIT krb5 Denial of Service Vulnerability

MIT krb5 also known as MIT Kerberos 5 is the United States Massachusetts Institute of Technology MIT developed a set of network authentication protocols, which uses a client/server structure, and the client and server side can be authenticated to each other i.e., double authentication to prevent...

Tor Denial of Service Vulnerability (CNVD-2018-05901)

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. A security vulnerability exists in Tor versions prior to 0.2.9.15, 0.3.1.x prior to 0.3.1.10, and 0.3.2.x prior to 0.3.2.10. A remote attacker could exploit this...

Exempi Null Pointer Reference Vulnerability

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in Exempi 2.4.4 and earlier versions, which stems from a failure to detect the presence of null values in the bitstream in the XMPFiles/source/FormatSupport/WEBPSupport.cpp file. An attacker...

Linux kernel denial of service vulnerability (CNVD-2018-04627)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the fs/ocfs2/cluster/nodemanager.c file in the Linux kernel, which arises from a program failing to use a requested mutex.A local...

Apache Xerces-C XML Parser Library Denial of Service Vulnerability

Apache Xerces XML Parser library is the Apache Apache Software Foundation of the United States of America, a XML syntax parser library . Apache Xerces-C is its language version. A security vulnerability exists in the Apache Xerces-C XML Parser library. A remote attacker could exploit this...

Linux kernel denial of service vulnerability (CNVD-2018-05068)

Linux kernel is the kernel used by the operating system Linux released by the Linux Foundation in the United States. netfilter subsystem is one of the tcp network packet filtering subsystems. A security vulnerability exists in the netfilter subsystem in Linux kernel versions 4.15.7 and earlier. A...

ImageMagick 'BenchmarkOpenCLDevices' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'BenchmarkOpenCLDevices' function in the MagickCore/opencl.c file in ImageMagic...

Squid Software Foundation Squid HTTP Caching Proxy Denial of Service Vulnerability (CNVD-2018-05766 )

Squid Software Foundation Squid HTTP Caching Proxy is an open source HTTP caching proxy software . A security vulnerability exists in the handling of HTTP Response X-Forwarded-For packet headers in versions of Squid Software Foundation Squid HTTP Caching Proxy prior to 4.0.23. An attacker could...

Intel Graphics Driver Local Elevation of Privilege Vulnerability

Intel Graphics Driver is an integrated graphics driver developed by Intel Corporation USA. A security vulnerability exists in a pointer backreference to a subsystem in Intel Graphics Driver versions 15.40.x.x, 15.45.x.x, and 15.46.x.x. The vulnerability can be exploited with local access rights t...

ClamAV Null Pointer Dereference Vulnerability

ClamAV AntiVirus software is a free and open source antivirus software developed by ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A security vulnerability exists in ClamAV AntiVirus software that stems from the program's use of an incorrect inp...

Irssi null pointer dereference vulnerability (CNVD-2018-03170)

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A security vulnerability exists in versions of Irssi prior to 1.0.6. An attacker can exploit this vulnerability to affect the stability of Irssi null pointer backreference...

ImageMagick MagickCore Component Denial of Service Vulnerability

ImageMagick is a set of open source image processing software from the U.S. company ImageMagick Studio. The software can read, convert, write pictures in a variety of formats.MagickCore component is one of the core components. A denial of service vulnerability exists in the MagickCore component o...

K7 Antivirus K7Sentry.sys Denial of Service Vulnerability (CNVD-2018-01082)

K7 Antivirus is a suite of anti-virus software from the Indian company K7 Computing.K7Sentry.sys is one of the kernel-mode drivers used in K7 Computing's security products. A security vulnerability exists in K7 Antivirus version 15.1.0309 in K7Sentry.sys version 15.1.0.59. An attacker can exploit...

Tor Denial of Service Vulnerability (CNVD-2017-38231)

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. Tor suffers from a denial of service vulnerability. A remote attacker could exploit this vulnerability to cause a denial of service null pointer backreference and...

Linux kernel denial of service vulnerability (CNVD-2017-36476)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'rngapireset' function of the crypto/rng.c file in versions of Linux kernel prior to 4.2. An attacker exploits this...

libbpg VideoLAN x265 Denial of Service Vulnerability

libbpg is a new image format library. videoLAN x265 is one of the H.265 video format libraries. A denial of service vulnerability exists in the 'CUData::initialize' function in the common/cudata.cpp file of VideoLAN x265 in libbpg version 0.9.7 and other products, which stems from the program...

libbpg Integer Overflow Vulnerability

libbpg is a new type of image format library. An integer overflow vulnerability exists in the 'imagealloc' function of the bpgenc.c file in libbpg version 0.9.7. An attacker can exploit this vulnerability to cause a denial of service invalid dynamic memory allocation and null pointer backreferenc...

SWFTools Denial of Service Vulnerability (CNVD-2017-37437)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2, which stems from the program's failure to properly restrict multiplication in malloc calls. The...

tcmu-runner null pointer backreference vulnerability

tcmu-runner is a daemon for handling user space for LIO TCM user backend storage. A security vulnerability exists in the 'onunregisterhandler' function in tcmu-runner versions 1.0.5 through 1.2.0. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference...