5689 matches found
CVE-2017-7472
CVE-2017-7472 affects the KEYS subsystem of the Linux kernel prior to version 4.10.13. A local attacker can exhaust memory by repeatedly invoking keyctl_set_reqkey_keyring on KEY_REQKEY_DEFL_THREAD_KEYRING, leading to a denial of service. The vulnerability is triggered by a sequence of calls in t...
SUSE-SU-2017:1222-1 Security update for Botan
This update for Botan to version 1.10.9 fixes the following issues: These security issues were fixed: - CVE-2015-5726: The BER decoder in Botan 0.10.x allowed remote attackers to cause a denial of service application crash via an empty BIT STRING in ASN.1 data bsc968025. - CVE-2015-5727: The BER...
Deserialization of untrusted data
DISPUTED The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted U...
Code injection
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with no subsequent free via a...
ALPINE-CVE-2017-8779
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with no subsequent free via a...
Denial Of Service (DoS) Via Memory Consumption
github.com/hyperledger/fabric is vulnerable to denial of service DoS attacks. The attacks exists because it uses hash field in the protos comparator function to compare two large blocks disseminated. However, it does not prevent sending of arbitrary hash via the hash field of the DataMsg, leading...
CVE-2017-8779
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with no subsequent free via a...
CVE-2017-8379
Memory leak in the keyboard input event handlers support in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption by rapidly generating large keyboard events...
CVE-2017-8086
Memory leak in the v9fslistxattr function in hw/9pfs/9p-xattr.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service memory consumption via vectors involving the origvalue variable...
CVE-2017-8086
Memory leak in the v9fslistxattr function in hw/9pfs/9p-xattr.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service memory consumption via vectors involving the origvalue variable...
CVE-2017-8086
CVE-2017-8086: In QEMU, a memory leak in v9fs_list_xattr (hw/9pfs/9p-xattr.c) can be triggered by the orig_value path, allowing local privileged guest users to cause denial of service via memory consumption. Public metrics show CVSSv2/3 for this issue (4.9, 6.5). The connected advisories (e.g., D...
CVE-2017-8086
Memory leak in the v9fslistxattr function in hw/9pfs/9p-xattr.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service memory consumption via vectors involving the origvalue variable...
EulerOS 2.0 SP1 : java-1.7.0-openjdk (EulerOS-SA-2017-1027)
According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the RMI registry and DCG implementations in the RMI component of OpenJDK performed deserialization of untrust...
EulerOS 2.0 SP1 : openssl (EulerOS-SA-2016-1047)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denia...
Updated java-1.8.0-openjdk packages fix security vulnerability
An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges CVE-2017-3511. It was found that the JAXP component of...
CVE-2017-8327
The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...
CVE-2017-8327
The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...
CVE-2017-8327
CVE-2017-8327 affects ImageWorsener prior to 1.3.1. The vulnerability is in the bmpr_read_uncompressed function (imagew-bmp.c) of libimageworsener.a, where crafted BMP images can trigger memory consumption leading to a denial of service. Public sources in the connected documents corroborate a DoS...
