459 matches found
FreeRDP Input Validation Error Vulnerability (CNVD-2020-31433)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. An input validation error vulnerability exists in rdpsndrecvwave2pdu in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product that does not properly validate...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way CIFS shares with DFS referrals at their root were handled. An attacker on the local network who is able to deploy a malicious CIFS server could create a CIFS network share that, when mounted,...
SUSE-SU-2020:0505-1 Security update for mariadb
This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...
curl: LDAP NULL pointer dereference
A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldapgetattributeber function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply...
usersctp - Out-of-Bounds Reads in sctp_load_addresses_from_init
''' usersctp is SCTP library used by a variety of software including WebRTC. There is a vulnerability in the sctploadaddressesfrominit function of usersctp that can lead to a number of out-of-bound reads. The input to sctploadaddressesfrominit is verified by calling...
UBUNTU-CVE-2020-2574
Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
OpenSSH < 4.5 Multiple Vulnerabilities
Binary data 701165.prm...
GOG Galaxy Denial of Service Vulnerability
GOG Galaxy is a game client program. The program is used to install, launch and update games. A denial of service vulnerability exists in GOG Galaxy that originates from a networked system or product that does not properly authenticate incoming data. An attacker could exploit the vulnerability to...
PT-2018-16029 · Oracle +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.60 and prior Oracle MySQL versions 5.6.40 and prior Oracle MySQL versions 5.7.22 and prior Oracle MySQL versions 8.0.11 and prior Description: The issue allows a high privileged attacker with network access via...
ISC DHCP Buffer Overflow Vulnerability
ISC DHCP is an open source software implementation of the Dynamic Host Configuration Protocol used to connect to IP networks. A buffer overflow vulnerability exists in ISC DHCP. An attacker could trigger a buffer overflow in the DHCP option processing by returning a specially crafted response fro...
Tor Denial of Service Vulnerability (CNVD-2018-00232)
Tor is free software that enables anonymous communication. A denial of service vulnerability exists in Tor before 0.2.8.12. An attacker can exploit this vulnerability to cause a denial of service client crash via specially crafted hidden service descriptors...
CVE-2016-1254
Tor before 0.2.8.12 might allow remote attackers to cause a denial of service client crash via a crafted hidden service descriptor...
IBM Notes Denial of Service Vulnerability (CNVD-2017-25669)
IBM Notes is a set of collaborative office software from IBM in the United States. The software has e-mail, calendar, scheduling and other office functions. A denial of service vulnerability exists in IBM Notes. An attacker can exploit this vulnerability to cause a denial of service client hangs...
TeamSpeak Server Buffer Overflow Vulnerability
TeamSpeak Serve is a voice over IP communication system server designed specifically for online gamers. A buffer overflow vulnerability exists in TeamSpeak Server version 3.0.13.6 08/11/2016 09:48:33. An attacker can exploit this vulnerability to cause a denial of service WINDOWS client crash...
CVE-2017-3730
In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...
CVE-2017-3730
In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...
CVE-2017-3730 Bad (EC)DHE parameters cause a client crash
In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...
SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2017:1094-1)
This update for tigervnc provides the several fixes. These security issues were fixed : - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server bsc1031886 - CVE-2017-7395: Authenticated VNC client can crash VNC server bsc1031877 - CVE-2017-7394: Client can crash or block VNC server...
SUSE-SU-2017:1093-1 Security update for tigervnc
This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server bsc1031886 - CVE-2017-7395: Authenticated VNC client can crash VNC server bsc1031877 - CVE-2017-7394: Client can crash or block VNC server...