CVE-2018-7757

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service memory consumption via many read accesses to files in the /sys/class/sasphy directory, as demonstrated by the...

CVE-2018-7757

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service memory consumption via many read accesses to files in the /sys/class/sasphy directory, as demonstrated by the...

CVE-2018-7757

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service memory consumption via many read accesses to files in the /sys/class/sasphy directory, as demonstrated by the...

CVE-2018-7757

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service memory consumption via many read accesses to files in the /sys/class/sasphy directory, as demonstrated by the...

Wowza Streaming Engine Denial of Service Vulnerability

Wowza Streaming Engine is a Unified Streaming Media Server software developed by Wowza Media Systems. A denial of service vulnerability exists in Wowza Streaming Engine. An attacker can exploit this vulnerability to cause a denial of service memory consumption via a specially crafted HTTP request...

Cross site request forgery (csrf)

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7048

CVE-2018-7048 affects Wowza Streaming Engine prior to 4.7.1. The issue is a denial-of-service caused by memory consumption triggered by a crafted HTTP request, with network-based attack vector and no authentication required per the available descriptions. The NVD entry documents a base score of 5...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3575-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3575-1 advisory. It was discovered that QEMU incorrectly handled guest ram. A privileged attacker inside the guest could use this issue to cause QEMU to crash...

USN-3575-1: QEMU vulnerabilities

It was discovered that QEMU incorrectly handled guest ram. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-11334 David Buchanan discovered that QEMU...

Denial Of Service (DoS)

Zziplib is vulnerable to denial of service DoS attacks.The application does not contains a uncontrolled memory allocation, allowing a malicious user to pass a zip file to the application to cause memory consumption and crash the application...

What You Should Know About Side-Channel Attacks, Like Meltdown

“The light is on in their window. They must be home.” This is a classic example of a side information channel. They didn’t TELL you they were home. But the side effect of them being home in the evening is the light in the window — which is how you’re pretty sure they are home even though this...

CVE-2018-0137

A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate limiting protection for TCP listening ports. An attacker could explo...

Design/Logic Flaw

A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate limiting protection for TCP listening ports. An attacker could explo...

CVE-2018-0137

A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate limiting protection for TCP listening ports. An attacker could explo...

openSUSE Security Update : ImageMagick (openSUSE-2018-145)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file bsc1076051 - CVE-2017-18029: Prevent memory leak in...

Memory corruption

Memory leak in the ccnlappRX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption via vectors involving an envelopes structure pointer when the packet format is unknown...

CVE-2017-12467

Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption by leveraging failure to allocate memory for the comp or complen structure member...