Darwin Nuke Vulnerability Details in OS X, iOS Disclosed

Since Apple released a monster batch of patches for OS X and iOS last week, details on a number of the vulnerabilities that were addressed have been made public. The latest concerns a kernel vulnerability in the Darwin operating system, an open-source OS developed and used by Apple in its desktop...

pgbouncer -- remote denial of service

PgBouncer reports: Fix remote crash - invalid packet order causes lookup of NULL pointer. Not exploitable, just DoS...

tcpdump denial of service vulnerability (CNVD-2015-01965)

tcpdump is a sniffer tool that runs at the command line. It allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A remote denial of service vulnerability exists in tcpdump's force printer, which can be exploited by an attacker...

OpenSSL 'dtls1_listen' Function Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in the 'dtls1listen' function of OpenSSL 'd1lib.c'. Due to the program failing to properly...

OpenSSL ASN.1 signature-verification denial-of-service vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in the 'ASN.1 signature-verification' of the 'rsaitemverify' function in OpenSSL...

Integer overflow

Integer overflow in unace 1.2b allows remote attackers to cause a denial of service crash via a small file header in an ace archive, which triggers a buffer overflow...

UBUNTU-CVE-2015-1220

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size ...

krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens

A NULL pointer dereference flaw was found in the MIT Kerberos SPNEGO acceptor for continuation tokens. A remote, unauthenticated attacker could use this flaw to crash a GSSAPI-enabled server application...

UBUNTU-CVE-2015-0830

The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service application crash via crafted WebGL content...

Google Email Application for Android Denial of Service Vulnerability

Google Email Application for Android is a suite of email applications for the Android platform from Google Inc. A security vulnerability in version 4.2.2.0200 of the Google Email Application for Android application allows a remote attacker to send emails containing a specially crafted...

OpenLDAP Denial of Service Vulnerability

OpenLDAP is an open source Lightweight Directory Access Protocol LDAP implementation. A denial of service vulnerability exists in OpenLDAP 2.4.13 through 2.4.40, which can be exploited by remote attackers to cause a denial of service null pointer backreference and crash with the help of a special...

Crashing Google Email App for Android Just By Sending a Malicious Email

A vulnerability has been discovered in the wildly popular Google’s Stock Android Email App, that could be exploited by malicious attackers to remotely crash your smartphone application just by sending a specially crafted email. A Spain security researcher, Hector Marco, successfully exploited the...

ALPINE-CVE-2014-9636

unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression...

PHP libmagick 'src/softmagic.c' out-of-bounds read vulnerability

PHP is a popular programming language. An out-of-bounds read vulnerability exists in PHP libmagick 'src/softmagic.c', which allows remote attackers to exploit the vulnerability to crash the application...

Adobe Reader Acrobat Denial of Service Vulnerability

Adobe Acrobat Reader is the United States Adobe developed a very popular and excellent PDF document reading software. A denial of service vulnerability exists in Adobe Reader Acrobat, which allows remote attackers to launch denial of service attacks via a carefully crafted PDF document...

Aruba Networks Instant Heap Buffer Overflow Vulnerability

Aruba Networks Instant IAP is a suite of access point AP solutions from Aruba Networks, USA. The solution supports virtualization of Aruba Mobility Controllers on 802.11n Access Points APs, creation of enterprise-grade Wireless Local Area Networks WLANs and enterprise entry-level Wi-Fi networks,...

DEBIAN-CVE-2015-1463

ClamAV before 0.98.6 allows remote attackers to cause a denial of service crash via a crafted petite packer file, related to an "incorrect compiler optimization."...

AZL-6953 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

DEBIAN-CVE-2014-8625

Multiple format string vulnerabilities in the parseerrormsg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 package or 2 architecture name...

USN-2478-1 libssh vulnerability

It was discovered that libssh incorrectly handled certain kexinit packets. A remote attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service...