openSUSE Security Update : json-c (openSUSE-SU-2014:0558-1)

This json-c update fixes the following two security issue : - bnc870147: Fixed buffer overflow if sizet is larger than int CVE-2013-6370. - bnc870147: Fixed possible hash collision DoS CVE-2013-6371. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0342-1)

This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service CVE-2012-0841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : sblim-cim-client2 (openSUSE-SU-2012:1621-1)

This update of sblim-cim-client2 fixed a Denial of Service via hash table collision issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-839. The text description of this plugi...

openSUSE Security Update : ruby (openSUSE-2012-77)

ruby update to 1.8.7.p357 to fix hash colission attacks %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-77. The text description of this plugin is C SUSE LLC...

json-c: hash collision DoS

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...

Python 'Hash Collision' Denial of Service Vulnerability - Mac OS X

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

Python 'Hash Collision' Denial of Service Vulnerability - Windows

Python is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescripti...

USN-2239-1: Linux kernel (Saucy HWE) vulnerabilities

Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service system crash or gain administrative privileges. CVE-2014-3153 A flaw was discovered in the Linux kernel virtual machine's kvm validation of interrupt...

Ubuntu: Security Advisory (USN-2226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2014-0244 Updated mono packages fix security vulnerability

Mono 2.10.9 does not properly randomize hash functions for form posts to protect against hash collision attacks. A remote attacker could send specially crafted parameters, possibly resulting in a Denial of Service condition CVE-2012-3543...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2226-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2226-1 advisory. Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain...

Cisco IOS Software Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in Link Layer Discovery Protocol LLDP in Cisco switches could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to incorrect handling of malformed LLDP packets. An attacker could exploit this vulnerability by sending a...

Code injection

Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service CPU consumptio...

CVE-2013-7040

Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service CPU consumptio...

CVE-2013-7040

Removed by vendor...

Cisco Adaptive Security Appliance DHCPv6 Denial of Service Vulnerability

A vulnerability in the DHCP code of Cisco ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of an affected system. The vulnerability is due to insufficient validation of crafted or malformed DHCP version 6 DHCPv6 packets when DHCPv6 replay feature is enabled. An...

DEBIAN-CVE-2013-6371

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...

Apache Tomcat Parameter Hash Collision Denial of Service - Ver2 (CVE-2011-4858)

A denial-of-service vulnerability has been reported in Apache Software Foundation Tomcat. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

MaraDNS < 1.3.07.14 / 1.4.x < 1.4.10 Hash Collision Form Parameter Remote DoS

According to its self-reported version number, the MaraDNS server running on the remote host is affected by a hash collision issue when large amounts of specially crafted queries with the Recursion Desired RD bit set are sent to the remote server. This issue could allow a remote attacker to crash...

MaraDNS 2.0.x < 2.0.05 Hash Collision Zone File Record Local DoS

According to its self-reported version number, the MaraDNS server running on the remote host is affected by a hash collision issue when parsing records in zone files. This issue could allow a local attacker to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if...