9839 matches found
Mozilla Firefox < 78.0.2
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 78.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-28 advisory. - Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the...
CVE-2020-13935: Loop with Unreachable Exit Condition
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of...
PT-2020-22767
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description It was discovered that X-Frame-Options could be bypassed in some circumstances. If a user were tricked into opening a specially crafted website, an attack...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
PT-2020-14570
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 78 Firefox versions prior to 78.0.2 Description The issue allows framing of other websites using object or embed tags, despite those websites disallowing framing with the X-Frame-Options header. Recommendations Fo...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
ALPINE-CVE-2020-15563
An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HV...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
PT-2020-14494
Name of the Vulnerable Software and Affected Versions Xen versions 4.8 through 4.13.x Description An issue in Xen allows x86 HVM guest OS users to cause a hypervisor crash due to an inverted conditional in the dirty video RAM tracking code. This enables malicious or buggy HVM guests to make Xen...
Amazon Linux 2 : nghttp2 (ALAS-2020-1445)
The version of nghttp2 installed on the remote host is prior to 1.41.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1445 advisory. In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept...
USN-4407-1 libvncserver vulnerabilities
It was discovered that LibVNCServer incorrectly handled decompressing data. An attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. CVE-2019-15680 It was discovered that an information disclosure vulnerability existed in LibVNCServer when sendin...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
PT-2020-17566
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions APQ8009 through APQ8098 Qualcomm Snapdragon versions IPQ6018 through IPQ8074 Qualcomm Snapdragon versions MDM9206 through MDM9650 Qualcomm Snapdragon versions MSM8905 through MSM8998 Qualcomm Snapdragon versions...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS.It is possible because of brcmfmac frame validation bypass...
kernel: brcmfmac frame validation bypass
If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and not be processed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be...
RHEL 7 : kernel (RHSA-2020:2522)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2522 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: double free may be caused by t...
MGASA-2020-0256 Updated nghttp2 packages fix security vulnerability
nghttp2 has been updated to version 1.41.0 to fix CVE-2020-11080. The overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes 2400 individual settings entries over and...