Denial Of Service (DoS)

net/http in github.com/golang/go is vulnerable to denial of service DoS attacks. The attacks are possible because it does not check the range requests to make sure the total number of bytes in all the ranges is not larger than or equal to the size of the file...

OpenBSD 6.0 httpd Content-Length DoS Exploit

Exploit for openbsd platform in category dos / poc Log message: Reimplement httpd's support for byte ranges. The previous implementation loaded all the output into a single output buffer and used its size to determine the Content-Length of the body. The new implementation calculates the body leng...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to trigger a service failure.

The Apache HTTP Server, which is part of the Zyxel ZyWALL USG 300 network interface/router, incorrectly handles HTTP requests with modified Range fields. As a result, the device stops responding to HTTP requests...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2015-07405)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security vulnerability in the Cisco AsyncOS file-range request feature allows a remote attacker to submit multiple file-range requests, consume system memory, and conduct...

DSA-3139-1 squid - security update

Bulletin has no description...

[SECURITY] [DSA 3014-1] squid3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3014-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 28, 2014 http://www.debian.org/security/faq -...

USN-2327-1 squid3 vulnerability

Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a denial of service...

USN-2327-1: Squid 3 vulnerability

Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a denial of service...

Ubuntu 14.04 LTS : Squid 3 vulnerability (USN-2327-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2327-1 advisory. Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a...

Fedora 15 : httpd-2.2.21-1.fc15 (2011-12715)

This update includes the latest stable release of the Apache HTTP Server, version 2.2.21. Two security issues have been fixed : modproxyajp when combined with modproxybalancer: Prevents unrecognized HTTP methods from marking ajp: balancer members in an error state, avoiding denial of service...