67 matches found
CVE-2024-4029
Summary: CVE-2024-4029 affects Red Hat/JBoss WildFly-based platforms via the EAP management interface. The vulnerability arises from no limit on sockets/connections to the management interface, potentially causing denial of service when hitting the nofile limit. The issue is referenced in Red Hat...
GO-2024-2687 HTTP/2 CONTINUATION flood in net/http
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
Linux kernel security vulnerability
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from memcpy breaking when connlimit is used in a collection element...
AZL-31310 CVE-2023-39325 affecting package golang for versions less than 1.20.7-2
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
The vulnerability of the QEMU hardware emulation software, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to the VNC server. When a client connects to the server, QEMU checks whether the current number of connections exceeds a certain threshold. If it does, QEMU will terminate the previous connection. If the previous connection was ...
PT-2023-12137 · Vsftpd +1 · Vsftpd +1
Name of the Vulnerable Software and Affected Versions: VSFTPD version 3.0.3 Description: The issue allows attackers to cause a denial of service due to a limited number of connections allowed. Recommendations: For VSFTPD version 3.0.3, at the moment, there is no information about a newer version...
K14741: OpenSSH vulnerability CVE-2010-5107
Security Advisory Description The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service connection-slot exhaustion by periodically making many n...
SUSE CVE-2020-35359
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...
CVE-2022-41952
CVE-2022-41952 affects Matrix Synapse up to 1.52.x with URL previews enabled. The issue arises when previewing media stream URLs, as connections are not properly bounded by time or data, potentially causing long-lived connections to streaming servers (e.g., Icecast) and excessive traffic if expos...
Medium: java-11-amazon-corretto
Issue Overview: Title: Wider MultiByte conversions Buffer overflow is possible due to incorrect byte count should be character count. CVE-2022-21618 Title: Improve NTLM support writeSecurityBuffer writes a serialized security buffer to be used for NTLM auth. One of the fields that are serialized ...
Moderate: Red Hat Security Advisory: OpenJDK 17.0.5 Security Update for Portable Linux Builds
The Red Hat build of OpenJDK 17 java-17-openjdk is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0...
RLSA-2022:7012 Moderate: java-11-openjdk security and bug fix update
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixes: OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 OpenJDK: excessive memory allocation in X.509 certificate...
CVE-2021-31645
An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit...
CVE-2021-31645
An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit...
Code injection
An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit...
CVE-2021-31645
An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit...
Cannot Connect Session Previously Disconnected From Receiver Linux
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When the user tries to reconnect the session that was previously disconnected for Linux from Citrix...
vsftpd 3.0.3 - Remote Denial of Service Exploit
Exploit Title: vsftpd 3.0.3 - Remote Denial of Service Exploit Author: xynmaps Vendor Homepage: https://security.appspot.com/vsftpd.html Software Link: https://security.appspot.com/downloads/vsftpd-3.0.3.tar.gz Version: 3.0.3 Tested on: Parrot Security OS 5.9.0 -------------------------------...