CVE-2016-5300

Expat CVE-2016-5300 is a denial-of-service vulnerability in the Expat XML parser caused by insufficient entropy used for hash initialization. The issue allows context-dependent attackers to cause CPU exhaustion via crafted identifiers in XML documents. Connected material confirms this as an Expat...

CVE-2016-5300

The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876...

CVE-2016-5300

The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876...

Scientific Linux Security Update : file on SL6.x i386/x86_64 (20160510)

Security Fixes : - Multiple flaws were found in the file regular expression rules for detecting various files. A remote attacker could use these flaws to cause file to consume an excessive amount of CPU. CVE-2014-3538 - A denial of service flaw was found in the way file parsed certain Composite...

[SECURITY] [DSA 3597-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3597-1 [email protected] https://www.debian.org/security/ Luciano Bello June 07, 2016 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3597-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4786

Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service CPU consumption via unspecified vectors...

CVE-2016-4021

The readbinary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service infinite loop and CPU consumption via crafted input, as demonstrated by the \xa3\x03 string...

Design/Logic Flaw

The readbinary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service infinite loop and CPU consumption via crafted input, as demonstrated by the \xa3\x03 string...

CVE-2016-4021

The readbinary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service infinite loop and CPU consumption via crafted input, as demonstrated by the \xa3\x03 string...

CVE-2016-4786

Pulse Connect Secure (PCS) is affected by CVE-2016-4786, a denial-of-service vulnerability that allows remote attackers to cause high CPU usage. Affected ranges include PCS 7.4 up to 7.4r13.3; 8.0 up to 8.0r10; 8.1 up to 8.1r2; and 8.2 up to 8.2r0. The issue has been resolved in PCS releases 7.4r...

CVE-2016-4021

The CVE-2016-4021 issue affects pgpdump’s read_binary function (buffer.c) in versions before 0.30, allowing context-dependent attackers to cause a Denial of Service via crafted input (demonstrated by the \xa3\x03 string), leading to infinite loops and high CPU usage. Public advisories/stateful re...

CVE-2016-4037

The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular split isochronous transfer descriptor siTD list, a related issue to CVE-2015-8558...

CVE-2016-4037

The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular split isochronous transfer descriptor siTD list, a related issue to CVE-2015-8558...

CVE-2015-8558

The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular isochronous transfer descriptor iTD list...

CVE-2015-8558

CVE-2015-8558 is a QEMU USB EHCI emulation flaw in ehci_process_itd that can cause an infinite loop and CPU DoS when a circular iTD list is processed. A privileged guest user could exploit this locally. Debian security advisory DSA-3471-1 notes a fix in qemu for Jessie: upgrade to 1:2.1+dfsg-12+d...

CVE-2016-4037

CVE-2016-4037 affects QEMU, specifically the USB EHCI emulation (ehci_advance_state in hw/usb/hcd-ehci.c). It enables a local privileged guest OS user to cause a denial of service via a circular split isochronous transfer descriptor list (siTD), an issue related to CVE-2015-8558. The description ...

CVE-2015-8558

The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular isochronous transfer descriptor iTD list...

CVE-2016-4037

The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular split isochronous transfer descriptor siTD list, a related issue to CVE-2015-8558...

CentOS 6 : file (CESA-2016:0760)

An update for file is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...