12339 matches found
CVE-2019-9747
In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS Multicast DNS packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompressnlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As a...
CVE-2019-9747
In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS Multicast DNS packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompressnlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As a...
CVE-2019-9747
CVE-2019-9747 affects tinysvcmdns (through 2018-01-16). A crafted mDNS packet can cause an infinite loop in uncompress_nlabel when compressed labels reference each other, leading the mDNS server to hang after processing the packet. The issue is triggered during parsing of an mDNS query; no explic...
CVE-2019-3833
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in processconnection when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server...
GLSA-201903-05 : Tar: Denial of service
The remote host is affected by the vulnerability described in GLSA-201903-05 Tar: Denial of service The sparsedumpregion function in sparse.c file in Tar allows an infinite loop using the --sparse option. Impact : A local attacker could cause a Denial of Service condition by modifying a file that...
Tar: Denial of service
Background The Tar program provides the ability to create and manipulate tar archives. Description The sparsedumpregion function in sparse.c file in Tar allows an infinite loop using the --sparse option. Impact A local attacker could cause a Denial of Service condition by modifying a file that is...
ImageMagick 7.0.7.28 Multiple Vulnerabilities - Windows
ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"; if...
EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1069)
According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop vulnerability was found in ext/iconv/iconv.c in PHP due to the iconv stream not rejecting invalid multibyte sequences. A remote...
F5 BIG-IP Infinite Loop Vulnerability
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An infinite loop vulnerability exists in F5 BIG-IP. An attacker could exploit this vulnerability to cause the system to...
CVE-2019-6594
On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP MPTCP does not protect against multiple zero length DATAFINs in the reassembly queue, which can lead to an infinite loop in some circumstances...
CVE-2019-6594
F5 BIG-IP CVE-2019-6594 affects multiple BIG-IP releases where Multi-Path TCP (MPTCP) does not guard against multiple zero-length DATA_FINs in the reassembly queue, potentially causing an infinite loop and temporary traffic processing failures with failover in device groups. The F5 advisory K9102...
CVE-2019-6594
On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP MPTCP does not protect against multiple zero length DATAFINs in the reassembly queue, which can lead to an infinite loop in some circumstances...
F5 Networks BIG-IP : BIG-IP TMM vulnerability (K91026261)
The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3.3 / 12.1.4 / 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K91026261 advisory. - On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and...
CVE-2018-20784
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfsrq's, which allows attackers to cause a denial of service infinite loop in updateblockedaverages or possibly have unspecified other impact by inducing a high load...
UBUNTU-CVE-2018-20784
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfsrq's, which allows attackers to cause a denial of service infinite loop in updateblockedaverages or possibly have unspecified other impact by inducing a high load...
CVE-2018-6687
Loop with Unreachable Exit Condition 'Infinite Loop' in McAfee GetSusp GetSusp 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows...
Denial Of Service (DoS)
libraw.so is vulnerable to denial of service DoS attack. The function unpackedloadraw in internal/dcrawcommon.cpp allows an attacker to cause a type confusion error that leads to an infinite loop using a malicious input...
McAfee GetSusp Remote Denial of Service Vulnerability
McAfee GetSusp is a malware scanning application from McAfee USA.M A remote denial of service vulnerability exists in the file scanning feature of McAfee GetSusp version 3.0.0.461. The vulnerability can be exploited to cause a denial of service infinite loop with the help of a specially crafted...