637 matches found
Wireshark DNP3 Parser Denial of Service Vulnerability
Wireshark is the most popular network protocol parser. Wireshark's implementation of the DNP3 parser has a security vulnerability in the function dnp3alprocessobject in epan/dissectors/packet-dnp.c, which can be exploited by a remote attacker to cause a denial of service application crash...
Libxml2 Denial of Service Vulnerability (CNVD-2016-01133)
Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A security vulnerability exists in the 'htmlParseNameComplex' function in the HTMLparser....
Wireshark ZigBee ZCL Parser Denial of Service Vulnerability
Wireshark is the most popular network protocol parser. Wireshark version 2.0.x prior to 2.0.1 and version 1.12.x prior to 1.12.9 ZigBee ZCL parser epan/dissectors/packet-zbee-zcl-general.c in the dissectzclpwrprof pwrprofstatersp function fails to properly validate the general profile number fiel...
CVE-2015-8027
Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...
OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893...
OpenJDK: leak of user.dir location (JAXP, 8078427)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP...
UBUNTU-CVE-2015-4870
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser...
F5 Networks BIG-IP : SOAP parser vulnerability (SOL15879)
The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue in the soapxmlParseFile and...
Wireshark GSM RLC/MAC Parser Denial of Service Vulnerability
Wireshark is an open source protocol analysis program. A dead loop vulnerability exists in the Wireshark GSM RLC/MAC parser, which allows attackers to exploit the vulnerability by submitting special message parses to crash the application...
Debian DLA-266-1 : libxml2 security update
This upload to Debian squeeze-lts fixes three issues found in the libxml2 package. 1 CVE-2015-1819 / 782782 Florian Weimer from Red Hat reported an issue against libxml2, where a parser which uses libxml2 chokes on a crafted XML document, allocating gigabytes of data. This is a fine line issue...
Cisco Nexus OS Device Command Line Interface Local Elevation of Privilege Vulnerability
Nexus is Cisco's line of network switches designed for data centers. A security vulnerability in the CLI parser of the Cisco Nexus Operating System NX-OS allows an authenticated, local attacker to gain elevated privileges by exploiting this vulnerability...
Wireshark WCCP Parser Remote Denial of Service Vulnerability (CNVD-2015-03985)
Wireshark is an open source network protocol analysis tool. A security vulnerability in the Wireshark WCCP parser allows remote attackers to exploit the vulnerability to submit special request data and crash the application...
Cisco ASA VPN XML Parser Denial of Service Vulnerability
The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in Cisco ASA Software's XML parser that stems from a failure to effectively strengthen the XML parser configuration. It could be exploited b...
Xerces-C++ XML Parsing Remote Denial of Service Vulnerability
Xerces is promoted by the Apache organization of an XML document parsing open source project . A vulnerability in the processing of XML data in internal/XMLReader.cpp in Apache Xerces-C allows remote attackers to conduct denial-of-service attacks...
Wireshark WCCP Parser Remote Denial of Service Vulnerability (CNVD-2015-00207)
Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in the Wireshark WCCP parser, which can be exploited by an attacker to crash an affected application and deny service to legitimate users...
EUVD-2014-7961
The ELF parser readelf.c in file before 5.21 allows remote attackers to cause a denial of service CPU consumption or crash via a large number of 1 program or 2 section headers or 3 invalid capabilities...
CVE-2014-6603
The SSHParseBanner function in SSH parser app-layer-ssh.c in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service crash, or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write...
Oracle Linux 5 : tomcat (ELSA-2009-1164)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1164 advisory. - add patch for CVE-2007-5333 Resolves: rhbz427779 - add patch for CVE-2008-5515 Resolves: rhbz504758 - add patch for CVE-2009-0033 - add patch for...
RHEL 4 : JBoss EAP (RHSA-2009:1144)
Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix various issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.2.0.CP07. This update has been rated as having important security impact by the Red Hat Security Response Team. JBoss Enterprise Application Platfor...