golang: data race in certain net/http servers including ReverseProxy can lead to DoS

A flaw was found Go's net/http package. Servers using ReverseProxy from net/http in the Go standard library are vulnerable to a data race that results in a denial of service. The highest threat from this vulnerability is to system availability...

nghttp2: overly large SETTINGS frames can lead to DoS

A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...

USN-4362-1 dpdk vulnerabilities

It was discovered that DPDK incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. CVE-2020-10722, CVE-2020-10723, CVE-2020-10724, CVE-2020-10725, CVE-2020-10726...

ZeroMQ: Arbitrary code execution

Background Looks like an embeddable networking library but acts like a concurrency framework. Description A buffer overflow was discovered in ZeroMQ. Impact An attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Workaround Ther...

CVE-2019-12263

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition...

python urllib CRLF injection vulnerability

Python is a widely used high-level programming language that is general-purpose, and urllib is the standard library in Python for network requests. A CRLF injection vulnerability exists in python urllib, which can be exploited by an attacker by controlling the url parameters to perform a CRLF...

Mongoose Web Server 6.5 CSRF / Command Execution Vulnerability

Mongoose Web Server version 6.5 suffers from cross site request forgery and remote command execution vulnerabilities. + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MONGOOSE-WEB-SERVER-v6.5-CSRF-COMMAND-EXECUTION.txt +...

DEBIAN-CVE-2015-1817

Stack-based buffer overflow in the inetpton function in network/inetpton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allows attackers to have unspecified impact via unknown vectors...

Multiple Heap Buffer Overflow Vulnerabilities in Libevent

libevent is an event-triggered network library for windows, linux, bsd and other platforms, the internal use of select, epoll, kqueue and other system calls to manage the event mechanism. Libevent has multiple heap buffer overflow vulnerabilities that could allow an attacker to execute arbitrary...

Zoidcom 0.6.x Malformed Packet Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25326/info The Zoidcom network library is prone to a denial of service vulnerability when handling malformed packets. An attacker could exploit this to crash a network service that is implemented with the library. / by...

Tincat Network Library Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12912/info Tincat is reported prone to a remote buffer overflow vulnerability. It is reported that this issue exists in the function responsible for logging users that have connected to a game server. A successful attack...

Chrome Stable Release

The Google Chrome team is happy to announce the arrival of Chrome 15.0.874.102 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 15 contains some really great improvements including a new New Tab page. You can read about it more on the Google Chome blog. Security fixes and...

Qt 4.6.3 - QSslSocketBackendPrivate::transmit() Denial of Service

Qt 4.6.3 - QSslSocketBackendPrivate::transmit Denial of Service Source: http://aluigi.org/adv/qtsslame-adv.txt Luigi Auriemma Application: Qt http://qt.nokia.com Versions: = 4.6.3 Platforms: Windows, Mac OS X, Linux, mobile devices Bug: QSSLsocket endless loop Exploitation: remote, versus server...

[Full-disclosure] Crash in Zoidcom 0.6.7

Luigi Auriemma Application: Zoidcom http://www.zoidcom.com Versions: = 0.6.7 some older version could be not vulnerable Platforms: Windows, Linux and Mac Bug: crash Exploitation: remote Date: 14 Aug 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 Th...

Zoidcom 0.6.x - Malformed Packet Denial of Service

Zoidcom 0.6.x - Malformed Packet Denial of Service // source: https://www.securityfocus.com/bid/25326/info The Zoidcom network library is prone to a denial of service vulnerability when handling malformed packets. An attacker could exploit this to crash a network service that is implemented with...

Multiple ENet network library vulnerabilities

Integer overflow, DoS...

CVE-2005-1899

Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service infinite loop via a zero-byte UDP packet...

CVE-2005-1899

Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service infinite loop via a zero-byte UDP packet...

CVE-2005-1899

Affected software: Rakkarsoft RakNet network library 2.33 and earlier. Vulnerability: remote denial of service via a zero-byte UDP packet, causing an infinite loop. Impact scope: used in multiple products (e.g., nFusion Elite Warriors: Vietnam) as of the cited CVE. Root cause/notes: the descripti...

Server termination in Raknet 2.33 (before 30 May 2005)

Luigi Auriemma Application: Raknet network library http://www.rakkarsoft.com Versions: = 2.33 before 30 May 2005 the bug has been introduced in some recent updates but is not known what is the exact first vulnerable version Platforms: Windows and Unix Bug: server termination and endless loop...