PYSEC-2012-36

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

CVE-2012-2101

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

CVE-2011-4006

The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...

Design/Logic Flaw

The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...

Code injection

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...

CVE-2011-3295

CVE-2011-3295 impacts Cisco IOS XR 3.8–4.1 (as deployed in Cisco Carrier Routing System and related products). The NETIO and IPV4_IO processes can be abused by crafted network traffic to cause a denial of service via CPU exhaustion. The available sources confirm the affected platform and the cond...

CVE-2011-4006

The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...

CVE-2011-4006

The CVE-2011-4006 issue affects Cisco ASA 5500 series with software 8.2–8.5, caused by a vulnerability in the ESMTP inspection feature that can be exploited to trigger a denial-of-service via an unspecified closing sequence, leading to CPU consumption. Remediation/mitigation reported in connected...

tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)

Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Code injection

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Mandriva Update for ruby MDVSA-2012:024 (ruby)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

tomcat: large number of parameters DoS

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service CPU consumption via a request that contains many parameters and parameter values, a different vulnerability...

Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities

Binary data 6332.pasl...

Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities

Binary data 800607.prm...

RHEL 5 : Red Hat Enterprise Linux 5.8 kernel update (Moderate) (RHSA-2012:0150)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0150 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: A flaw was foun...

FreeBSD Ports: tomcat

The remote host is missing an update to the system as announced in the referenced advisory. VID 7f5ccb1d-439b-11e1-bc16-0023ae8e59f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7f5ccb1d-439b-11e1-bc16-0023ae8e59f0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-0840

CVE-2012-0840 affects the Apache Portable Runtime (APR) library, specifically tables/apr_hash.c, up to version 1.4.5. The vulnerability arises from insufficient randomization of hash data structures, enabling context-dependent remote attackers to trigger predictable hash collisions and cause CPU ...

CVE-2012-1035

AdaCore Ada Web Services AWS before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...