Design/Logic Flaw

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service daemon crash and host-control outage, or memory consumption or obtain sensitive control-plane data by...

CVE-2013-0215

CVE-2013-0215 affects Xen 4.1.x, 4.2.x and the xen-unstable tree. The oxenstored daemon fails to correctly account for the Xenstore ring state during reads, enabling a guest with admin access to crash oxenstored and cause host-control outages or to cause memory exhaustion, with potential exposure...

CVE-2013-1821

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service memory consumption and crash via crafted text nodes in an XML document, aka an XML Entity Expansion XEE attack...

PT-2013-2161 · Xen · Xen

Name of the Vulnerable Software and Affected Versions: Xen versions 4.1.x through 4.2.x Xen version xen-unstable Description: The issue allows guest OS users with administrative access to cause a denial of service, resulting in a daemon crash and host-control outage, or memory consumption. It als...

Medium: kernel

Issue Overview: It was found that a deadlock could occur in the Out of Memory OOM killer. A process could trigger this deadlock by consuming a large amount of memory, and then causing requestmodule to be called. A local, unprivileged user could use this flaw to cause a denial of service excessive...

CVE-2013-0183

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a long string in a Multipart HTTP packet...

CVE-2013-0183

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a long string in a Multipart HTTP packet...

Code injection

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a long string in a Multipart HTTP packet...

CVE-2013-0183

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a long string in a Multipart HTTP packet...

CVE-2013-0183

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a long string in a Multipart HTTP packet...

Scientific Linux Security Update : squid on SL6.x i386/x86_64 (20130221)

A denial of service flaw was found in the way the Squid Cache Manager processed certain requests. A remote attacker who is able to access the Cache Manager CGI could use this flaw to cause Squid to consume an excessive amount of memory. CVE-2012-5643 This update also fixes the following bugs : -...

[SECURITY] [DSA 2634-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2634-1 [email protected] http://www.debian.org/security/ Nico Golde February 27, 2013 http://www.debian.org/security/faq -...

Debian DSA-2631-1 : squid3 - denial of service

Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi : - CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of servi...

[SECURITY] [DSA 2631-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2630-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 24, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2631-1 (squid3 - denial of service)

Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi: CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of service...

Django 1.3/1.4 拒绝服务和信息泄露漏洞

BUGTRAQ ID: 58061 CVECAN ID: CVE-2013-0305,CVE-2013-0306 Django是Python编程语言驱动的一个开源Web应用程序框架。 Django 1.3.6、1.4.4之前版本在实现上存在多个漏洞，可被恶意用户利用绕过某些安全限制并造成拒绝服务。 1、扩展XML实体时存在错误，通过包含恶意属性的特制XML，可消耗大量内存。 2、处理某些XML数据时存在错误，通过包含外部实体引用的特制XML数据，可泄露敏感信息。 3、在访问历史视图时，管理员界面没有正确验证访问权限，可被利用查看管理界面内的对象访问历史。...

CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service memory consumption and crash via crafted text nodes in an XML document, aka an XML Entity Expansion XEE attack...

RHEL 6 : squid (RHSA-2013:0505)

Updated squid packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mandriva Linux Security Advisory : squid (MDVSA-2013:013)

Multiple vulnerabilities has been found and corrected in squid cachemgr.cgi : Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service memory consumption via 1...

Moderate: Red Hat Security Advisory: squid security and bug fix update

Updated squid packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...