CVE-2017-7659

A maliciously constructed HTTP/2 request could cause modhttp2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process...

CVE-2017-11654

An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic...

CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

CVE-2017-11434

The dhcpdecode function in slirp/bootp.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash via a crafted DHCP options string...

PHP 7.1.x < 7.1.7 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.7. It is, therefore, affected by the following vulnerabilities : - An out-of-bounds read error exists in the GD Graphics Library LibGD in the gdImageCreateFromGifCtx function within file gdgifin.c...

Fedora 25 : webkitgtk4 (2017-bff1b87765)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix JavaScriptCore...

Code injection

Huawei Ascend P7 allows remote attackers to cause a denial of service phone process crash...

CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

Null pointer dereference

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

CVE-2015-7895

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...

CVE-2015-7898

Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...

CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

CVE-2015-7895

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...

CVE-2015-2245

Huawei Ascend P7 allows remote attackers to cause a denial of service phone process crash...

CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

Denial Of Service (DoS)

httpolyglot within Kibana is vulnerable to denial of service DoS attacks. These attacks are possible when the application is configured for SSL client access. File descriptors are not cleaned up correctly after some requests, these descriptors accumulate over time and crash the process...

CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

Google Android b/libs/gui/ISurfaceComposer.cpp file denial of service vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the b/libs/gui/ISurfaceComposer.cpp file in Android. An attacker can exploit the vulnerability to cause a denial of service null pointer...

CVE-2015-3220

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service runtime exception and process crash...