506 matches found
Huawei S3300 EFM Feature Oscillation Vulnerability
Huawei S3300 is a Huawei switch device. The Huawei S3300 suffers from an EFM Feature Shock vulnerability, which allows an attacker to construct malformed messages to be sent to the device due to the device's lack of consistency checking for a certain type of TLV, resulting in an EFM service shock...
mod_jk: Buffer overflow when concatenating virtual host name and URI
It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...
DEBIAN-CVE-2016-9376
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflowv5.c by ensuring that certain length values were sufficiently large...
ntp: incomplete checks in ntp_crypto.c
It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...
CVE-2016-6808
It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...
Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL regression (USN-3087-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3087-2 advisory. USN-3087-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2016-2182 was incomplete and caused a regression when parsing certificates. This update...
OpenSSL dtls1_preprocess_fragment() Denial of Service Vulnerability
OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. OpenSSL version 1.1.0 allocates memory for constructed messages before excessive message length checks, which can allow an attacker t...
Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL vulnerabilities (USN-3087-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3087-1 advisory. Shi Lei discovered that OpenSSL incorrectly handled the OCSP Status Request extension. A remote attacker could possibly use this issue to cau...
OpenSSL tls_get_message_header() Denial of Service Vulnerability
OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. OpenSSL version 1.1.0 allocates memory for constructed messages before excessive message length checks, which can allow an attacker t...
USN-3087-1: OpenSSL vulnerabilities
Shi Lei discovered that OpenSSL incorrectly handled the OCSP Status Request extension. A remote attacker could possibly use this issue to cause memory consumption, resulting in a denial of service. CVE-2016-6304 Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointe...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/misc/qseecom.c file in Qualcomm’s Android operating system is related to the lack of data length checking. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially created application...
Ubuntu 14.04 LTS / 16.04 LTS : HarfBuzz vulnerabilities (USN-3067-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3067-1 advisory. Kostya Serebryany discovered that HarfBuzz incorrectly handled memory. A remote attacker could use this issue to cause HarfBuzz to crash,...
USN-3067-1 harfbuzz vulnerabilities
Kostya Serebryany discovered that HarfBuzz incorrectly handled memory. A remote attacker could use this issue to cause HarfBuzz to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2015-8947 It was discovered that HarfBuzz incorrectly handled certain length checks. ...
The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or trigger a service failure.
Mozilla Firefox ESR contains a vulnerability related to errors in the implementation of the TypedArrayObject class lack of checking the length of the final array before copying it. Exploiting this vulnerability allows malicious actors to execute arbitrary code or cause service failures logging...
Libksba denial of service vulnerability
Libksba is a library that simplifies work tasks for X.509 certificates, CMS data and related objects. Libksba fails to properly check object lengths, allowing remote attackers to exploit the vulnerability to trigger out-of-bounds reads, resulting in a denial-of-service attack...
ntp: incomplete checks in ntp_crypto.c
It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...
ntp: incomplete checks in ntp_crypto.c
It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...
SUSE-SU-2016:0946-1 Security update for quagga
This update for quagga fixes the following security issue: - CVE-2016-2342: Quagga was extended the prefixlen check to ensure it is within the bound of the NLRI packet data and the on-stack prefix structure and the maximum size for the address family bsc970952...
UBUNTU-CVE-2015-8723
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service stack-based...