DEBIAN-CVE-2016-9432

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service memory corruption, segmentation fault, and crash via a crafted HTML page...

DEBIAN-CVE-2016-9428

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9631

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...

php: Double Free Corruption in wddx_deserialize

Double free vulnerability in the phpwddxprocessdata function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted XML data that is...

The Windows Local Security authentication subsystem service LSASS remote memory corruption vulnerability MS16-137）

In an attacker to send a carefully camouflaged application, the local security authentication subsystem service LSASS memory damage caused by a denial of service vulnerability A vulnerability in the Windows Local Security Authority Subsystem Service LSASS was found on Windows OS versions ranging...

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137) Exploit

Exploit for windows platform in category dos / poc MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016...

ntp: restriction list NULL pointer dereference

A NULL pointer dereference flaw was found in the way ntpd processed 'ntpdc reslist' commands that queried restriction lists with a large amount of entries. A remote attacker could potentially use this flaw to crash ntpd...

ntp: stack exhaustion in recursive traversal of restriction list

A stack-based buffer overflow flaw was found in the way ntpd processed 'ntpdc reslist' commands that queried restriction lists with a large amount of entries. A remote attacker could use this flaw to crash ntpd...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

USN-3119-1 bind9 vulnerability

Tony Finch and Marco Davids discovered that Bind incorrectly handled certain responses containing a DNAME answer. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

MGASA-2016-0356 Updated tor packages fix security vulnerability

It has been discovered that Tor treats the contents of some buffer chunks as if they were a NUL-terminated string. This issue could enable a remote attacker to crash a Tor client, hidden service, relay, or authority CVE-2016-8860. The tor package has been updated to version 0.2.8.9, which fixes...

Tor -- remote denial of service

The Tor Blog reports: Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At least one such bug seems to be present in all currently used versions of Tor, and would allow an attacker to remotely crash most Tor instances,...

Citrix License Server for Windows and License Server VPX Denial of Service Vulnerabilities

Citrix License Server for Windows and License Server VPX are both products of Citrix Systems. The former is a Windows-based authentication server and the latter is an authentication server appliance. A security vulnerability exists in Citrix License Server for Windows versions prior to 11.14.0.1...

Android Qualcomm Wi-Fi gbk2utf Denial of Service Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the service/jni/comandroidserverwifiGbk2Utf.cpp file in the Qualcomm Wi-Fi gbk2utf component of Android allows remote attackers to exploit the vulnerability to build malicious apps that can crash the app...

Android kernel sound card driver denial of service vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Android's kernel sound card driver allows a remote attacker to exploit the vulnerability to build malicious applications that can crash the application...

Android Qualcomm MDSS Driver Denial of Service Vulnerability (CNVD-2016-09484)

Android is an open source operating system based on Linux. A security vulnerability in the drivers/video/msm/mdss/mdssmdppp.c file in the Qualcomm MDSS driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the application...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

UBUNTU-CVE-2016-5177

Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service crash or possibly have unspecified other impact via unknown vectors...

FreeBSD : irssi -- heap corruption and missing boundary checks (e78261e4-803d-11e6-a590-14dae9d210b8)

Irssi reports : Remote crash and heap corruption. Remote code execution seems difficult since only Nuls are written. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...