12325 matches found
Design/Logic Flaw
A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. A bad bounds check in archgetunmappedareatopdown triggered by programs doing an mmap after a MAPGROWSDOWN mmap will create an infinite loop...
CVE-2019-5274
USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop, an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service...
Security Advisory - Multiple Vulnerabilities in the X.509 Implementation in Some Huawei Products
There is a denial of service vulnerability in some Huawei products. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial o...
[SECURITY] [DLA 2045-1] tightvnc security update
Package : tightvnc Version : 1.3.9-6.5+deb8u1 CVE ID : CVE-2014-6053 CVE-2018-7225 CVE-2019-8287 CVE-2018-20021 CVE-2018-20022 CVE-2019-15678 CVE-2019-15679 CVE-2019-15680 CVE-2019-15681 Debian Bug : 945364 Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC...
Security Bulletin: Vulnerabilities in Apache Commons Compress affects IBM Watson Studio Local
Summary Vulnerabilities in Apache Commons Compress affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-12402 DESCRIPTION: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted...
EulerOS 2.0 SP3 : freetype (EulerOS-SA-2019-2581)
According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parseencoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service infinite loop via a...
EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-2576)
According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to ...
EulerOS 2.0 SP3 : wavpack (EulerOS-SA-2019-2680)
According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource...
EulerOS 2.0 SP3 : quagga (EulerOS-SA-2019-2657)
According to the versions of the quagga package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor...
EulerOS 2.0 SP3 : qpdf (EulerOS-SA-2019-2655)
According to the versions of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, relat...
EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2019-2634)
According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.1, there is a NULL pointer dereference at function ncparseentry in parseentry.c that will lead to a denial of service attack. The...
The vulnerability of the libxml2 library, related to the execution of a loop with an unreachable exit condition, allows attackers to cause a service failure.
The vulnerability of the libxml2 library lies in the execution of a loop with an unreachable exit condition an infinite loop. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by using a specially created XML file that triggers lzmamemlimiterror...
SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:3310-1)
This update for xen fixes the following issues : CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm bsc1158003 XSA-307. CVE-2019-19582: Fixed a potential infinite loop when x86 accesses to bitmaps with a compile time known size of 64 bsc1158003 XSA-307. CVE-2019-19583: Fixed improper...
DEBIAN-CVE-2014-8561
imagemagick 6.8.9.6 has remote DOS via infinite loop...
CVE-2014-8561
imagemagick 6.8.9.6 has remote DOS via infinite loop...
CVE-2014-8561
imagemagick 6.8.9.6 has remote DOS via infinite loop...
CVE-2014-8561
imagemagick 6.8.9.6 has remote DOS via infinite loop...
CVE-2014-8561
CVE-2014-8561 affects ImageMagick 6.8.9.6 with a remote denial-of-service via an infinite loop. The connected documents confirm the DoS impact, but do not provide explicit root-cause details, affected product variants beyond 6.8.9.6, or any remediation (patch/version) information. Documented expl...
