Race condition

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of servi...

EUVD-2017-3810

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of servi...

CVE-2017-12237: Undefined Security Weakness

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of servi...

Code injection

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339: Loop with Unreachable Exit Condition

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

ALPINE-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

CVE-2017-12211

A vulnerability in the IPv6 Simple Network Management Protocol SNMP code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this...

Design/Logic Flaw

A vulnerability in the IPv6 Simple Network Management Protocol SNMP code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this...

CVE-2017-12211

A vulnerability in the IPv6 Simple Network Management Protocol SNMP code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this...

CVE-2017-12211

CVE-2017-12211 affects Cisco IOS and IOS XE IPv6 SNMP handling. The vulnerability stems from IPv6 sub-block corruption, allowing an authenticated, remote attacker to cause high CPU usage or a device reload by polling IPv6 information. Affected release: Denali-16.3.1; Cisco Bug CSCvb14640. Remedia...

UBUNTU-CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File inside the loop in the cinereadheader function. This leads to high CPU and memory consumption when a malicious CINE file with a large duration field in the header...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the asfreadmarker function. This leads to high CPU and memory consumption when a malicious ASF file with a large namelen or count field in the header but witho...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the rl2readheader function of libavformat/rl2.c. This leads to high CPU and memory consumption when a malicious RL2 file with a large framecount field in the...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-24317)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'ReadXBMImage' function in the coders/xbm.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

libgig Denial of Service Vulnerability (CNVD-2017-27700)

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound Level 1/2 files, KORG sample instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. A denial of service vulnerability exists in the function...

OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)

It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak...