40 matches found
Qualcomm 芯片 资源管理错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualco...
CVE-2020-12821
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack...
Code injection
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack...
CVE-2020-12821
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack...
kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence
A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the...
CVE-2019-4614
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639...
macOS 10.14.3 iOS 12.1.3 - Arbitrary mach Port Name Deallocation in XPC Services due to Invalid mach Message Parsing in _xpc_serializer_unpack
macOS 10.14.3 iOS 12.1.3 - Arbitrary mach Port Name Deallocation in XPC Services due to Invalid mach Message Parsing in xpcserializerunpack / xpcserializerunpack in libxpc parses mach messages which contain xpc messages. There are two reasons for an xpc mach message to contain descriptors: if the...
UBUNTU-CVE-2018-18849
In Qemu 3.0.0, lsidomsgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msglen value...
Buffer Overflow Vulnerability in SIP Backup Module for Multiple Huawei Products
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...
Design/Logic Flaw
The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...
CVE-2017-16227
The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...
CVE-2014-0221
The dtls1getmessagefragment function in d1both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service recursion and client crash via a DTLS hello message in an invalid DTLS handshake...
ISC BIND rdata Denial Of Service Vulnerability
This vulnerability allows remote attackers to cause a denial of service condition on vulnerable installations of ISC BIND. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of an rdata section with a length that is less than four. The issue...
Heap overflow
Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service queue manager crash by inserting an invalid message into the queue...
CVE-2008-4907
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...
Dovecot 1.1.x - Invalid Message Address Parsing Denial of Service
Dovecot 1.1.x - Invalid Message Address Parsing Denial of Service source: https://www.securityfocus.com/bid/31997/info Dovecot is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted email headers. An attacker can exploit this issue to prevent...
Dovecot 1.1.x - Invalid Message Address Parsing Denial of Service
source: https://www.securityfocus.com/bid/31997/info Dovecot is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted email headers. An attacker can exploit this issue to prevent recipients from accessing their mailboxes. For an exploit to succeed,...
Design/Logic Flaw
Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...
CVE-2007-3201
Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...
