CVE-2016-4555

A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process...

CVE-2016-3712

Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash by editing VGA registers in VBE mode...

DSA-3573-1 qemu - security update

Bulletin has no description...

mod_auth_mellon denial of service vulnerability (CNVD-2016-02440)

modauthmellon is an Apache module that provides simple SAML Security Assertion Markup Language 2.0 services. A denial of service vulnerability exists in the amreadpostdata function in versions of modauthmellon prior to 0.11.1, which can be exploited by a remote attacker to cause a denial of servi...

CVE-2016-2145

The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...

CVE-2016-2146

The amreadpostdata function in modauthmellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service worker process crash, web server deadlock, or memory consumption via a large amount of POST data...

CVE-2016-2145

The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...

CVE-2016-2145

The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...

PT-2016-5027

Name of the Vulnerable Software and Affected Versions mod auth mellon versions prior to 0.11.1 Description The issue is related to the am read post data function, which fails to check for errors returned by the ap get client block function. This oversight allows remote attackers to craft maliciou...

CVE-2016-4017

The Data Provisioning Agent aka DP Agent in SAP HANA allows remote attackers to cause a denial of service process crash via unspecified vectors, aka SAP Security Note 2262710...

Code injection

The Data Provisioning Agent aka DP Agent in SAP HANA allows remote attackers to cause a denial of service process crash via unspecified vectors, aka SAP Security Note 2262710...

CVE-2016-4017

CVE-2016-4017 concerns SAP HANA’s Data Provisioning Agent (DP Agent). The vulnerability enables remote attackers to cause a denial of service (process crash) via unspecified vectors, as referenced by SAP Security Note 2262710. The Connected documents corroborate this description across multiple c...

CVE-2016-4015

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

CVE-2016-4015

CVE-2016-4015 is a DoS vulnerability in the SAP NetWeaver JAVA AS Enqueue Server. A crafted request in Enqueue Server (affecting SAP NetWeaver Enqueue Server 7.4 and likely earlier 7.1–7.4) can crash the process, enabling remote attackers to deny service. The issue is documented with SAP Security...

PT-2016-1705

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS versions 7.1 through 7.4 Description The issue is related to errors in the code of the Enqueue Server component in SAP NetWeaver. It allows remote attackers to cause a denial of service, specifically a process crash, via ...

CVE-2016-4017: Undefined Security Weakness

The Data Provisioning Agent aka DP Agent in SAP HANA allows remote attackers to cause a denial of service process crash via unspecified vectors, aka SAP Security Note 2262710...

CVE-2016-4015: Undefined Security Weakness

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

PT-2016-1704

Name of the Vulnerable Software and Affected Versions SAP HANA affected versions not specified Description The issue is related to errors in the code of the Data Provisioning Agent component in SAP HANA, allowing remote attackers to cause a denial of service, specifically a process crash. The exa...

CVE-2016-2385

Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio formerly OpenSER and SER before 4.3.5 allows remote attackers to cause a denial of service memory corruption and process crash or possibly execute arbitrary code via a large SIP packet...

CVE-2016-2385

CVE-2016-2385 describes a heap-based buffer overflow in Kamailio’s SEAS module (encode_msg.c) that can be triggered by oversized SIP packets, potentially leading to memory corruption, a process crash, or remote code execution. The vulnerability affects Kamailio versions prior to 4.3.5; the Fixed ...