CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

Google Android b/libs/gui/ISurfaceComposer.cpp file denial of service vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the b/libs/gui/ISurfaceComposer.cpp file in Android. An attacker can exploit the vulnerability to cause a denial of service null pointer...

PYSEC-2017-96

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service runtime exception and process crash...

CVE-2015-3220

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service runtime exception and process crash...

Red Hat oVirt Engine Denial of Service Vulnerability

Red Hat oVirt Engine is an open source virtualization management platform from Red Hat Red Hat, an open source version of RHEV Platform for Enterprise Virtualization, consisting of the oVirt-node client and the overt-engine management side . A denial of service vulnerability exists in the...

CVE-2014-7919

b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service null pointer dereference and process crash...

CVE-2017-9022

The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpzpowmsec, which allows remote peers to cause a denial of service floating point exception and process crash via a crafted certificate...

Design/Logic Flaw

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service process crash for all VMs...

CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

Denial of service

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

CVE-2016-9960

CVE-2016-9960 affects game-music-emu prior to 0.6.1, allowing local users to cause a denial-of-service via a divide-by-zero that crashes the process. The NVD entry documents the vulnerability; Gentoo GLSA-201707-02 and Gentoo advisories describe multiple vulnerabilities in Game Music Emu and reco...

CVE-2016-3077

CVE-2016-3077 affects oVirt Engine via the VersionMapper.fromKernelVersionString method. The vulnerability allows remote authenticated users to trigger a denial of service (process crash) affecting all VMs. No exploitation vector or exploit details are provided in the supplied documents. Remediat...

CVE-2016-3077

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service process crash for all VMs...

CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

CVE-2017-8313

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...

CVE-2017-8313

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...

Jenkins XStream: Java crash when trying to instantiate void/Void (CVE-2017-1000355)

Jenkins uses the XStream library to serialize and deserialize XML. Its maintainer recently published a security vulnerability that allows anyone able to provide XML to Jenkins for processing using XStream to crash the Java process. In Jenkins this typically applies to users with permission to...

Jenkins Multiple Vulnerabilities (Apr 2017) - Windows

Multiple cross-site request forgery CSRF vulnerabilities in Jenkins allow malicious users to perform several administrative actions by tricking a victim into opening a web page. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...