5762 matches found
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
CVE-2020-15025
The CVE-2020-15025 entry concerns ntpd (NTP) memory exhaustion via CMAC-related paths. Affected: ntpd 4.2.8 prior to 4.2.8p15 and 4.3.x prior to 4.3.101. Root cause: memory is not freed in CMAC-key scenarios in ntp.keys, enabling remote packets to trigger a denial of service through memory consum...
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
trafficserver -- resource consumption
Bryan Call reports: ATS is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread...
Mattermost Server Resource Management Error Vulnerability (CNVD-2020-41488)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A resource management error vulnerability exists in Mattermost Server. An attacker could exploit this vulnerability to cause a denial of service memory consumption with OpenGraph...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-41496)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server. An attacker could exploit this vulnerability to cause a denial of service memory consumption via an outgoing Webhook or slash command integratio...
CVE-2015-9548
An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...
CVE-2015-9548
CVE-2015-9548 affects Mattermost Server prior to 1.2.0. The issue allows attackers to cause a denial of service via a small compressed file that expands to a large size in memory, leading to memory consumption. The CVSS vectors indicate a network-based attack with low complexity and no authentica...
CVE-2015-9548
An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...
CVE-2019-20880
An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...
Command injection
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service memory consumption via an outgoing webhook or a slash command integration...
CVE-2018-21250
Mattermost Server is affected before versions 5.2.2, 5.1.2, and 4.10.4. A remote attacker can cause a denial of service by supplying crafted image dimensions, leading to memory consumption. The issue is documented across multiple sources (CVE-2018-21250). No remediation details are provided in th...
CVE-2019-20888
Mattermost Server contains a denial-of-service vulnerability (memory consumption) impacting versions before 5.7, 5.6.3, 5.5.2, and 4.10.5. The issue can be triggered by processing inputs from outgoing webhooks or slash command integrations. Red Hat and CNVD entries corroborate the affected versio...
CVE-2019-20880
Mattermost Server vulnerable to denial-of-service via OpenGraph handling. Affected versions: before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Root cause described as OpenGraph processing leading to memory consumption (DoS). No exploitation details or attacker vectors provided in the documents. No remediat...
CVE-2020-14152
In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...
CVE-2019-20845
An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...
CVE-2019-20845
An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...