Lucene search
+L

5714 matches found

Prion
Prion
added 2017/02/06 6:59 a.m.21 views

Design/Logic Flaw

The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...

4.9CVSS6.5AI score0.00401EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2017/02/06 6:04 a.m.30 views

CVE-2017-2596

The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...

6.5CVSS7AI score0.00401EPSS
SaveExploits0
Veracode
Veracode
added 2017/02/06 5:19 a.m.40 views

Denial Of Service (DoS) Through Memory Consumption And Application Crash

OpenSSL is vulnerable to denial of service DoS attacks through memory consumption and application crash. This is caused because the dtls1clearqueues function in d1lib.c frees data not taking into account that application data could arrive between the ChangeCipherSpec message and the Finished...

7.5CVSS7.2AI score0.16587EPSS
SaveExploits1References22Affected Software1
UbuntuCve
UbuntuCve
added 2017/02/06 12:00 a.m.27 views

CVE-2017-2596

The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...

6.5CVSS6.9AI score0.00401EPSS
SaveExploits0References7
OSV
OSV
added 2017/02/05 8:42 p.m.13 views

MGASA-2017-0041 Updated java-1.8.0-openjdk packages fix security vulnerabilities

It was discovered that the RMI registry and DCG implementations in the RMI component of OpenJDK performed deserialization of untrusted inputs. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application CVE-2017-3241. This...

9.6CVSS7.9AI score0.95707EPSS
SaveExploits13References4
OSV
OSV
added 2017/02/03 4:59 p.m.23 views

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

6.5CVSS6.8AI score
SaveExploits0References4
Prion
Prion
added 2017/02/03 4:59 p.m.17 views

Memory corruption

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

6.8CVSS7.1AI score0.02138EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2017/02/03 12:49 p.m.52 views

CVE-2016-10159

Integer overflow in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory consumption or application crash via a truncated manifest entry in a PHAR archive...

7.5CVSS5.9AI score0.07681EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2017/02/03 7:07 a.m.75 views

USN-3187-1: Linux kernel vulnerabilities

Andrey Konovalov discovered that the SCTP implementation in the Linux kernel improperly handled validation of incoming data. A remote attacker could use this to cause a denial of service system crash. CVE-2016-9555 It was discovered that multiple memory leaks existed in the XFS implementation in...

10CVSS6.4AI score0.09144EPSS
SaveExploits0
Veracode
Veracode
added 2017/02/03 6:21 a.m.46 views

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. The library does not clear DTLS handshake messages when they are delivered out of order even when the handshake has been completed. A malicious user can take advantage of this by opening multiple DTLS connections to the system, causing a...

7.5CVSS8.1AI score0.26559EPSS
SaveExploits1References26Affected Software3
Veracode
Veracode
added 2017/02/02 2:19 a.m.27 views

Denial Of Service (DoS)

FFMpeg is vulnerable to a denial of service DoS attacks. A malicious user can pass a malicious .mov file to the system, causing a denial of service via the consumption of memory...

5.5CVSS5.6AI score0.01125EPSS
SaveExploits0References1Affected Software2
RedhatCVE
RedhatCVE
added 2017/01/25 12:47 p.m.34 views

CVE-2017-5578

Memory leak in the virtiogpuresourceattachbacking function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands...

6.5CVSS7AI score0.00398EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2017/01/25 10:47 a.m.39 views

CVE-2017-5579

Memory leak in the serialexitcore function in hw/char/serial.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption and QEMU process crash via a large number of device unplug operations...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/01/25 12:00 a.m.46 views

PHP Multiple Denial of Service Vulnerabilities - 02 (Jan 2017) - Linux

PHP is prone to multiple denial of service DoS vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.8CVSS7.8AI score0.07681EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2017/01/25 12:00 a.m.79 views

PHP Multiple Denial of Service Vulnerabilities - 02 (Jan 2017) - Windows

PHP is prone to multiple denial of service DoS vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.8CVSS7.8AI score0.07681EPSS
SaveExploits0References2
OSV
OSV
added 2017/01/24 9:59 p.m.36 views

CVE-2016-10159

Integer overflow in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory consumption or application crash via a truncated manifest entry in a PHAR archive...

7.5CVSS7AI score
SaveExploits0References11
CVE
CVE
added 2017/01/24 9:00 p.m.255 views

CVE-2016-10159

CVE-2016-10159 describes an integer overflow in phar_parse_pharfile() (ext/phar/phar.c) that affects PHP before 5.6.30 and 7.0.x before 7.0.15. A crafted PHAR archive with a truncated manifest can cause memory consumption growth or application crash (DoS). Public documents in Red Hat ALAS-2017-81...

7.5CVSS8.3AI score0.07681EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
added 2017/01/24 9:00 p.m.47 views

CVE-2016-10159

Removed by vendor...

7.5CVSS7.5AI score0.07681EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/01/24 9:00 p.m.40 views

CVE-2016-10159

Integer overflow in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory consumption or application crash via a truncated manifest entry in a PHAR archive...

8.4AI score0.07681EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2017/01/24 12:00 a.m.51 views

CVE-2016-10159

Integer overflow in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory consumption or application crash via a truncated manifest entry in a PHAR archive...

7.5CVSS6.9AI score0.07681EPSS
SaveExploits0References5
Rows per page
Query Builder