Design/Logic Flaw

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service...

CVE-2018-14645

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service...

CVE-2018-14645

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service...

CVE-2018-14645

HAProxy HPACK decoder in versions before 1.8.14 contains an out-of-bounds read in hpack_valid_idx(), leading to remote crash and denial of service. Affected: HAProxy’s HTTP/2 HPACK handling. Impact: remote crash/DoS. Mitigation: upgrade to HAProxy 1.8.14 or newer (as indicated by multiple advisor...

CVE-2018-14645

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service...

CVE-2018-14827

CVE-2018-14827 affects Rockwell Automation RSLinx Classic Versions ≤ 4.00.01. A remote, unauthenticated actor can send specially crafted Ethernet/IP packets to port 44818, causing the RSLinx Classic software to stop responding and crash; recovery requires a restart. The connected documents confir...

CVE-2018-14829

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffe...

Design/Logic Flaw

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionali...

UBUNTU-CVE-2018-14641

A security flaw was found in the ipfragreasm function in net/ipv4/ipfragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash in ipdofragment. With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash...

Unspecified Vulnerability in Artifex Ghostscript (CNVD-2020-54492)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

Artifex Ghostscript Denial of Service Vulnerability (CNVD-2020-54478)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

Artifex Ghostscript Type Obfuscation Vulnerability (CNVD-2020-54479)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A type obfuscation...

glusterfs: File status information leak and denial of service

A flaw was found in RPC request using gfs3lookupreq in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process...

DEBIAN-CVE-2018-14622

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefdxprt was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an...

SUSE-SU-2018:2557-1 Security update for libtirpc

This update for libtirpc fixes the following issues: - Prevent remote crash of RPC services bsc968175...

asterisk -- Remote crash vulnerability in HTTP websocket upgrade

The Asterisk project reports: There is a stack overflow vulnerability in the reshttpwebsocket.so module of Asterisk that allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connection to a websocket. The attackers request causes Asterisk to run out of stack...

Security update for libtirpc (important)

This update for libtirpc fixes the following issues: Security issue fixed: - bsc968175: Fix remote crash of RPC services. Bug fixes: - bsc1072183: Send RPC getport call as specified via parameter. This update was imported from the SUSE:SLE-12-SP2:Update update project...

openSUSE Security Update : libtirpc (openSUSE-2018-851)

This update for libtirpc fixes the following issues : Security issue fixed : - bsc968175: Fix remote crash of RPC services. Bug fixes : - bsc1072183: Send RPC getport call as specified via parameter. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C...

CVE-2018-15174

XnView 2.45 allows remote attackers to cause a denial of service Read Access Violation at the Instruction Pointer and application crash or possibly have unspecified other impact via a crafted ICO file...

SUSE SLED12 / SLES12 Security Update : libtirpc (SUSE-SU-2018:2171-1)

This update for libtirpc fixes the following issues: Security issue fixed : - bsc968175: Fix remote crash of RPC services. Bug fixes : - bsc1072183: Send RPC getport call as specified via parameter. Note that Tenable Network Security has extracted the preceding description block directly from the...