kernel: Infoleak/use-after-free in __oom_reap_task_mm function in mm/oom_kill.c

The oomreaptaskmm function in mm/oomkill.c in the Linux kernel, before 4.14.4, mishandles gather operations. This allows attackers to cause a denial of service TLB entry leak or use-after-free or possibly have unspecified other impact by triggering a copytouser call within a certain time window...

pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via crafted PDF

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

USN-3752-3: Linux kernel (Azure, GCP, OEM) vulnerabilities

It was discovered that, when attempting to handle an out-of-memory situation, a null pointer dereference could be triggered in the Linux kernel in some circumstances. A local attacker could use this to cause a denial of service system crash. CVE-2018-1000200 Wen Xu discovered that the XFS...

USN-3752-1 linux, linux-aws, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities

It was discovered that, when attempting to handle an out-of-memory situation, a null pointer dereference could be triggered in the Linux kernel in some circumstances. A local attacker could use this to cause a denial of service system crash. CVE-2018-1000200 Wen Xu discovered that the XFS...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180814) (Foreshadow)

Security Fixes : - Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented...

openSUSE Security Update : the Linux Kernel (openSUSE-2018-762) (Spectre)

The openSUSE Leap 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges...

Debian DLA-1421-1 : ruby2.1 security update

Multiple vulnerabilities were found in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following issues : CVE-2015-9096 SMTP command injection in Net::SMTP via CRLF sequences in a RCPT TO or MAIL FROM command. CVE-2016-2339 Exploitable heap...

Apache PDFBox 1.8.14 / 2.0.10 Denial Of Service Vulnerability

Exploit for windows platform in category dos / poc CVE-2018-8036 DoS OOM Vulnerability in Apache PDFBox's AFMParser Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache PDFBox 1.8.0 to 1.8.14 Apache PDFBox 2.0.0 to 2.0.10 Earlier, unsupported Apache PDFBox versions...

Apache PDFBox's AFMParser Denial of Service Vulnerability

Apache PDFBox is the United States Apache Apache Software Foundation of an open source, Java-based and provide the creation of new PDF documents, modify existing PDF documents and other features of the tool library. A denial-of-service vulnerability exists in Apache PDFBox's AFMParser, where an...

Code injection

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

CVE-2018-8036

CVE-2018-8036 affects Apache PDFBox (versions 1.8.0–1.8.14 and 2.0.0RC1–2.0.10). A carefully crafted file can trigger an infinite loop in PDFBox’s AFMParser, causing memory exhaustion (DoS). Public details in connected IBM/IBM-Log-Analysis-related advisories confirm the issue and link to fixes, e...

CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Santuario (CVE-2013-4517)

Summary A version of Apache Santuario XML Security for Java shipped with Cúram is vulnerable to a denial of service attack. Customers that use xmlsec.jar to secure web services may be affected. Vulnerability Details CVEID: CVE-2013-4517 DESCRIPTION: Apache Santuario XML Security for Java is...

Denial Of Service (DoS)

github.com/prometheus/prometheus is vulnerable to denial of service DoS attacks. The application does not restrict the size of a POST request body, allowing a malicious client to write an arbitrary amount of data to the server to cause an out-of-memory exception that can crash the application...

Denial Of Service (DoS)

Apache PDFBox is vulnerable to denial of service DoS attacks. A malicious user can pass an AFM file to the application to cause an out-of-memory exception that can crash the application...