CVE-2008-4409

CVE-2008-4409 affects libxml2 (versions 2.7.0 and 2.7.1). It arises from improper handling of predefined entities definitions in entities, enabling context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by the use of xmllint on a speci...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

libxml2 - Denial of Service

source: https://www.securityfocus.com/bid/31555/info The libxml2 library is prone to a denial-of-service vulnerability caused by an error when handling files using entities in entity definitions. An attacker can exploit this issue to cause the library to consume an excessive amount of memory,...

CVE-2008-4340

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service memory consumption via an HTML document containing a carriage return "\r\n\r\n" argument to the window.open function...

Hardcoded credentials

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service memory consumption via an HTML document containing a carriage return "\r\n\r\n" argument to the window.open function...

CVE-2008-4340

CVE-2008-4340 affects Google Chrome versions 0.2.149.29 and 0.2.149.30. The issue is a denial-of-service condition where a crafted HTML document containing a CRLF sequence ("\r\n\r\n") passed to window.open can cause memory consumption. Connected sources confirm the affected versions and the vuln...

CVE-2008-4340

Removed by vendor...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

Memory corruption

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

Google Chrome - Carriage Return Null Object Memory Exhaustion

Google Chrome - Carriage Return Null Object Memory Exhaustion Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos. window.open"\r\n\r\n"; window.refresh; window.open"\r\n\r\n"; Google Chrome Carriage Return Null Object Memory Exhaustion Remote Denial of Service.Proof of Concept...

Design/Logic Flaw

Unspecified vulnerability in a web page in the PRM module in Sun Management Center SunMC 3.6.1 and 4.0 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2008-4117

Unspecified vulnerability in a web page in the PRM module in Sun Management Center SunMC 3.6.1 and 4.0 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2008-4117

The CVE-2008-4117 entry concerns Sun Management Center (SunMC) PRM module, affecting version 3.6.1 and 4.0, with an unspecified vulnerability that can cause a denial of service via memory consumption. The connected records confirm affected software (SunMC PRM), but do not reveal concrete exploita...

FreeBSD Ports: hashcash

The remote host is missing an update to the system as announced in the referenced advisory. VID 5ebfe901-a3cb-11d9-b248-000854d03344 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2003-1564

CVE-2003-1564 involves the XML parser library (libxml2) and a failure to detect recursion during entity expansion. A crafted XML document with a large number of nested entity references can trigger a denial of service through excessive memory and CPU usage (the classic “billion laughs” scenario)....

Red Hat Directory Server LDAP内存泄漏拒绝服务漏洞

BUGTRAQ ID: 30872 CVE ID: CVE-2008-3283 CNCVE ID：CNCVE-20083283 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Red Hat Directory Server存在多个内存泄漏问题，远程攻击者可以利用漏洞使目录服务器消耗大量内存，可能导致应用程序崩溃或不可期的终止。 目前没有详细漏洞细节提供。 RedHat Directory Server 8 EL 5 RedHat Directory Server 8 EL 4 RedHat Directory Server 7.1 SP6...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...