Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation in the QUIC server's unvalidated amplification credit accounting, which adds the full datagram length once per QUIC packet it contains rather than once per datagram. An attacker can use the server as a DDoS...

Debian DSA-4218-1 : memcached - security update

Several vulnerabilities were discovered in memcached, a high-performance memory object caching system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2017-9951 Daniel Shapira reported a heap-based buffer over-read in memcached resulting from an incomple...

CVE-2003-1354: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...