GHSA-562C-5R94-XH97 Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

Denial Of Service (DoS)

Flask is vulnerable to denial of service DoS attacks. The library does not properly handle JSON files not encoded in UTF-8, leading to excessive memory being consumed, crashing the application...

Ubuntu 18.04 LTS : OpenJDK 10 vulnerabilities (USN-3747-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3747-1 advisory. It was discovered that OpenJDK did not properly validate types in some situations. An attacker could use this to construct a Java class that could possib...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:2412-1)

This update for wireshark fixes the following issues: Security issues fixed : - bsc1094301: Wireshark security update to 2.6.1, 2.4.7, 2.2.15 - CVE-2018-14339: MMSE dissector infinite loop wnpa-sec-2018-38, bsc1101810 - CVE-2018-14341: DICOM dissector crash wnpa-sec-2018-39, bsc1101776 -...

Security Advisory 0037

Security Advisory 0037 . CSAF PDF Date: August 14th, 2018 Last Updated: March 25th, 2019 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | August 14, 2018 | Initial Release 1.1 | March 25, 2019 | Updated with Remediated versions The CVE-ID tracking this issue is CVE-2018-5391 CVSS v2: 7.8...

Debian DSA-4268-1 : openjdk-8 - security update

It was discovered that the PatternSyntaxException class in the Concurrency component of OpenJDK, an implementation of the Oracle Java platform could result in denial of service via excessive memory consumption. C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

USN-3735-1: OpenJDK 7 vulnerability

It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to potentially construct a class that caused a denial of service excessive memory consumption...

USN-3734-1: OpenJDK 8 vulnerability

It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to possibly construct a class that caused a denial of service excessive memory consumption...

USN-3734-1 openjdk-8 vulnerability

It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to possibly construct a class that caused a denial of service excessive memory consumption...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerability (USN-3735-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3735-1 advisory. It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to potentially...

Ubuntu 16.04 LTS : OpenJDK 8 vulnerability (USN-3734-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3734-1 advisory. It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to possibly...

Debian: Security Advisory (DSA-4268-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-Q7WX-62R7-J2X7 Nokogiri vulnerable to libxml XML Entity Expansion

The xmlreader in libxml allows remote attackers to cause a denial of service memory consumption via crafted XML data, related to an XML Entity Expansion XEE attack...

Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2017-9461)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method which could allow denial of service, caused by improper handling of dangling symlinks in smbd. A remote attacker could exploit this vulnerability to cause a fdopenatomic infinite loop with high CPU usage and memor...

SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2062-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-3688: The SCTP implementation allowed remote attackers to cause a denial of service memory consumption by triggering a large number of chunks in an...

SUSE-SU-2018:2062-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2014-3688: The SCTP implementation allowed remote attackers to cause a denial of service memory consumption by triggering a large number of chunks in an...

Debian DLA-1439-1 : resiprocate security update

CVE-2018-12584 A flaw in function ConnectionBase::preparseNewBytes of resip/stack/ConnectionBase.cxx has been detected, that allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled. CVE-2017-11521 A flaw in function...

GHSA-HJF3-R7GW-9RWG feedparser denial of service vulnerability

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

feedparser denial of service vulnerability

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

Low: libvirt

Issue Overview: An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent.CVE-2018-1064 qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU...