CVE-2014-9708

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a Range header with an empty value, as demonstrated by "Range: x=,"...

Null pointer dereference

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a Range header with an empty value, as demonstrated by "Range: x=,"...

PT-2015-4358 · Embedthis +2 · Appweb +2

Name of the Vulnerable Software and Affected Versions: Embedthis Appweb versions 4.6.6 and earlier, 5.x before 5.2.1 PAN-OS versions prior to 5.0.20 PAN-OS versions prior to 5.1.13 PAN-OS versions prior to 6.0.15 PAN-OS versions prior to 6.1.15 PAN-OS versions prior to 7.0.11 PAN-OS versions prio...

CVE-2014-9708: NULL Pointer Dereference

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a Range header with an empty value, as demonstrated by "Range: x=,"...

CVE-2014-9708

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a Range header with an empty value, as demonstrated by "Range: x=,"...

CVE-2014-9708

CVE-2014-9708 relates to Embedthis Appweb, where versions before 4.6.6 and 5.x before 5.2.1 are vulnerable to a remote denial of service caused by a NULL pointer dereference when handling a Range header with an empty value (e.g., “Range: x=,”). The vulnerability is triggered by processing a craft...

Appweb Web Server Denial Of Service

Affected software: Appweb Web Server CVE ID: CVE-2014-9708 Description: An HTTP request with a Range header of the form "Range: x=," ie. with an empty range value will cause a null pointer dereference, leading to a remotely-triggerable DoS. Fixed versions: 4.6.6, 5.2.1 Bug entry:...

Debian DLA-45-1 : squid3 security update

CVE-2014-3609: Denial of Service in Range header processing. Ignore Range headers with unidentifiable byte-range values. If squid is unable to determine the byte value for ranges, treat the header as invalid. NOTE: Tenable Network Security has extracted the preceding description block directly fr...

F5 Networks BIG-IP : Apache Range header vulnerability (K13114)

The byte-range filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial-of-service memory and CPU consumption using a Range header that expresses multiple overlapping ranges. When this vulnerability is exploited, the httpd...

Squid Range Header Denial of Service (CVE-2014-3609)

A denial of service vulnerability has been reported in Squid. The vulnerability is due to insufficient validation of range headers. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to an affected server. A successful attack will lead to a...

openSUSE Security Update : squid (openSUSE-SU-2014:1144-1)

This update fixes the following security issues and bugs with squid : A denial of Service in Range header processing was fixed that could be used by proxy users to crash squid. CVE-2014-3609 Also the following bugs were fixed : - bnc894840: removed unnecessary 'sharedscripts' in squid's logrotate...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9729)

Squid3 was updated to fix a denial of service in Range Header processing, which would have allowed proxy users to crash the squid proxy process. CVE-2014-3609 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

DLA-45-1 squid3 - security update

Bulletin has no description...

RHEL 7 : squid (RHSA-2014:1147)

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...

squid: assertion failure in Range header processing (SQUID-2014:2)

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid...

squid: assertion failure in Range header processing (SQUID-2014:2)

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid...

SlowHTTPTest - Application Layer DoS attack simulator

SlowHTTPTest is a highly configurable tool that simulates some Application Layer Denial of Service attacks. It works on majority of Linux platforms, OSX and Cygwin - a Unix-like environment and command-line interface for Microsoft Windows. It implements most common low-bandwidth Application Layer...

Buffer overflow

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...

CVE-2013-4977: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...

PT-2014-2884

Name of the Vulnerable Software and Affected Versions Hikvision DS-2CD7153-E IP camera version 4.1.0 b130111 Description The issue is related to a buffer overflow in the RTSP Packet Handler, which can be triggered by a long string in the Range header field in an RTSP transaction. This can cause a...