CVE-2017-12211

CVE-2017-12211 affects Cisco IOS and IOS XE IPv6 SNMP handling. The vulnerability stems from IPv6 sub-block corruption, allowing an authenticated, remote attacker to cause high CPU usage or a device reload by polling IPv6 information. Affected release: Denali-16.3.1; Cisco Bug CSCvb14640. Remedia...

UBUNTU-CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14170

In libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, a DoS in mxfreadindexentryarray due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nbindexentries" field in the header but does not contain sufficient backing data, is provided, th...

PT-2017-12401

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software version Denali-16.3.1 Description A vulnerability in the IPv6 Simple Network Management Protocol SNMP code could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File inside the loop in the cinereadheader function. This leads to high CPU and memory consumption when a malicious CINE file with a large duration field in the header...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the asfreadmarker function. This leads to high CPU and memory consumption when a malicious ASF file with a large namelen or count field in the header but witho...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the rl2readheader function of libavformat/rl2.c. This leads to high CPU and memory consumption when a malicious RL2 file with a large framecount field in the...

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-24317)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'ReadXBMImage' function in the coders/xbm.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

libgig Denial of Service Vulnerability (CNVD-2017-27700)

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound Level 1/2 files, KORG sample instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. A denial of service vulnerability exists in the function...

OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)

It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak...

SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS

A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients...

OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)

It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory...

OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)

It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The ReadWMFImage function in coders/wmf.c lead to attacks in CloneDrawInfo in draw.c because it does not properly handle the memory, causing high CPU consumption when processing a malicious file...

PT-2017-5026

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager version 5.21 Description: The issue is related to excessive logging during a TCP flood on Java ports, which can cause the server.log file to become very large, leading to increased CPU utilization...

DEBIAN-CVE-2017-11549

The playmidi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option...

OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)

It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory...

CVE-2017-2348

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...

CVE-2017-2348

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...