3803 matches found
CVE-2015-8558
CVE-2015-8558 is a QEMU USB EHCI emulation flaw in ehci_process_itd that can cause an infinite loop and CPU DoS when a circular iTD list is processed. A privileged guest user could exploit this locally. Debian security advisory DSA-3471-1 notes a fix in qemu for Jessie: upgrade to 1:2.1+dfsg-12+d...
CVE-2015-8558
The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular isochronous transfer descriptor iTD list...
CVE-2016-4037
CVE-2016-4037 affects QEMU, specifically the USB EHCI emulation (ehci_advance_state in hw/usb/hcd-ehci.c). It enables a local privileged guest OS user to cause a denial of service via a circular split isochronous transfer descriptor list (siTD), an issue related to CVE-2015-8558. The description ...
CVE-2015-8558
The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular isochronous transfer descriptor iTD list...
CVE-2016-4037
The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular split isochronous transfer descriptor siTD list, a related issue to CVE-2015-8558...
CentOS 6 : file (CESA-2016:0760)
An update for file is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
file, python security update
CentOS Errata and Security Advisory CESA-2016:0760 An update for file is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Moderate: Red Hat Security Advisory: file security, bug fix, and enhancement update
An update for file is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Xxe
The XML parser in Cisco Information Server CIS 6.2 allows remote attackers to read arbitrary files or cause a denial of service CPU and memory consumption via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCuy39059...
CVE-2016-4037
The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular split isochronous transfer descriptor siTD list, a related issue to CVE-2015-8558...
CVE-2016-2515
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service CPU consumption or partial outage via a long 1 header or 2 URI that is matched against an improper regular expression...
Input validation
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service CPU consumption or partial outage via a long 1 header or 2 URI that is matched against an improper regular expression...
CVE-2016-2515
CVE-2016-2515 affects Hawk in Node.js/npm deployments: Hawk before 3.1.3 and 4.x before 4.1.1 is vulnerable to a denial of service where an attacker can cause CPU exhaustion by sending an excessively long header or URI that matches an improper regular expression. Reported in multiple sources (GHS...
Important: 389-ds-base
Issue Overview: An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amou...
MGASA-2016-0081 Updated 389-ds-base packages fix security vulnerability
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and st...
F5 Networks BIG-IP : OpenSSH vulnerability (K17113)
The kbdintnextdevice function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service CPU consumptio...
389 security update
CentOS Errata and Security Advisory CESA-2016:0204 Updated 389-ds-base packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System...
Gratipay: grtp.co is vulnerable to http-vuln-cve2011-3192
vulnerability i have found! | http-vuln-cve2011-3192: | VULNERABLE: | Apache byterange filter DoS | State: VULNERABLE | IDs: CVE:CVE-2011-3192 OSVDB:74721 | The Apache web server is vulnerable to a denial of service attack when numerous | overlapping byte ranges are requested. | Disclosure date:...
Design/Logic Flaw
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service memory and CPU consumption via a large 1 websocket payload or 2 HTTP headers section...