5687 matches found
Type confusion
The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML type...
CVE-2013-1802
The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML typ...
CVE-2013-1801
Technical details for CVE-2013-1801 are not publicly available in the provided documents. No vendor/product/version specifics or remediation are disclosed here. Monitor for updates from official sources to obtain concrete details and fixes.
Strawberry Perl Denial of Service Vulnerability (Windows)
The host is installed with Strawberry Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbstrawberryperldosvulnwin.nasl 6079 2017-05-08 09:03:33Z teissa $ Strawberry Perl Denial of Service Vulnerability Windows Authors: Arun Kallavi Copyright: Copyright c 2013...
Active Perl Denial of Service Vulnerability (Windows)
The host is installed with Active Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbactiveperldosvulnwin.nasl 6093 2017-05-10 09:03:18Z teissa $ Active Perl Denial of Service Vulnerability Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...
Microsoft Active Directory LDAP Request Memory Consumption (MS13-032; CVE-2013-1282)
A denial of service vulnerability exists in implementations of Active Directory. Successful exploitation could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query. A Remote attacker can exploit this issue via a speciall...
Active Perl Denial of Service Vulnerability - Windows
Active Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Strawberry Perl Denial of Service Vulnerability - Windows
Strawberry Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : FreeBSD -- BIND remote denial of service (13031d98-9bd1-11e2-a7be-8c705af55518)
A flaw in a library used by BIND allows an attacker to deliberately cause excessive memory consumption by the named8 process. This affects both recursive and authoritative servers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2013-1845
The moddavsvn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service memory consumption by 1 setting or 2 deleting a large number of properties for a file or directory...
Important: bind
Issue Overview: A denial of service flaw was found in the libdns library. A remote attacker could use this flaw to send a specially-crafted DNS query to named that, when processed, would cause named to use an excessive amount of memory, or possibly crash. CVE-2013-2266 Affected Packages: bind Iss...
Ubuntu Update for bind9 USN-1783-1
Check for the Version of bind9 OpenVAS Vulnerability Test $Id: gbubuntuUSN17831.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for bind9 USN-1783-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
FreeBSD-SA-13:04.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-13:04.bind Security Advisory The FreeBSD Project Topic: BIND remote denial of service Category: contrib Module: bind Announced: 2013-04-02 Credits: Matthew...
FreeBSD -- BIND remote denial of service
A flaw in a library used by BIND allows an attacker to deliberately cause excessive memory consumption by the named8 process. This affects both recursive and authoritative servers...
[USN-1783-1] Bind vulnerability
========================================================================== Ubuntu Security Notice USN-1783-1 March 29, 2013 bind9 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20130328)
A denial of service flaw was found in the libdns library. A remote attacker could use this flaw to send a specially crafted DNS query to named that, when processed, would cause named to use an excessive amount of memory, or possibly crash. CVE-2013-2266 Note: This update disables the syntax...
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : bind9 vulnerability (USN-1783-1)
Matthew Horsfall discovered that Bind incorrectly handled regular expression checking. A remote attacker could use this flaw to cause Bind to consume an excessive amount of memory, possibly resulting in a denial of service. This issue was corrected by disabling RDATA regular expression syntax...
ISC BIND 9 'libdns' 远程拒绝服务漏洞(CVE-2013-2266)
Bugtraq ID:58736 CVE ID:CVE-2013-2266 ISC BIND是一款DNS协议的实现 ISC BIND存在一个安全漏洞,允许远程攻击者利用漏洞发送特制的请求,使目标named服务在处理规则表达式时消耗大量内存,造成系统崩溃。 BIND 9.6.x和10.x不受此漏洞影响。此外此漏洞仅影响unix及相关的操作系统,基于windows的版本不受此漏洞影响。 0 ISC BIND 9.7.x, 9.8.0 - 9.8.5b1, 9.9.0 - 9.9.3b1 厂商解决方案 ISC BIND 9.8.4-P2, 9.9.2-P及更改版本已经修复此漏洞,建议用户下载更...
CVE-2013-1142
Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service memory consumption via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745...
Race condition
Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service memory consumption via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745...