Product update: Virtuozzo 7.0 Update 6 Hotfix 1 (7.0.6-678)

The Hotfix 1 for Virtuozzo 7.0 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-72443 Migration of a VM with two HDDs from Virtuozzo 6 to 7 could fail due to a libvirt conversion failure. Vulnerability id: PSBM-77096 vstorage-mount could crash under certain conditions d...

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

PT-2017-15607

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose version 6.8 Description A programming error in the DNS server functionality can cause an infinite loop when a specially crafted DNS request is received, resulting in high CPU usage and Denial Of Service. An attacker can trigge...

Code injection

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

PT-2017-13400

Name of the Vulnerable Software and Affected Versions YADIFA versions prior to 2.2.6 Description The issue is related to the DNS packet parser, which does not check for infinite pointer loops. This allows an attacker to force the server into an infinite loop, resulting in high CPU usage and makin...

CVE-2017-14339: Loop with Unreachable Exit Condition

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

Design/Logic Flaw

A vulnerability in the IPv6 Simple Network Management Protocol SNMP code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this...

CVE-2017-12211

A vulnerability in the IPv6 Simple Network Management Protocol SNMP code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this...

CVE-2017-12211

CVE-2017-12211 affects Cisco IOS and IOS XE IPv6 SNMP handling. The vulnerability stems from IPv6 sub-block corruption, allowing an authenticated, remote attacker to cause high CPU usage or a device reload by polling IPv6 information. Affected release: Denali-16.3.1; Cisco Bug CSCvb14640. Remedia...

UBUNTU-CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

PT-2017-12401

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software version Denali-16.3.1 Description A vulnerability in the IPv6 Simple Network Management Protocol SNMP code could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The...

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-24317)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'ReadXBMImage' function in the coders/xbm.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

libgig Denial of Service Vulnerability (CNVD-2017-27700)

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound Level 1/2 files, KORG sample instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. A denial of service vulnerability exists in the function...