PT-2017-18784

Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.1 Description The issue allows remote attackers to cause a denial of service, specifically a divide-by-zero error, by providing a crafted image. This is related to the imagew-api.c file. Recommendations For...

CVE-2015-5401: Improper Input Validation

Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08Sles10 and 15.00.02.08Sles11 allow remote attackers to cause a denial of service database crash via a malformed CONFIG REQUEST message...

Fedora 25 : openvpn (2017-0d0f18140a)

This update brings in the latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated remote DoS vulnerabilities CVE-2017-7478 and CVE-2017-7479. For more information see the upstream security announcement. Note that Tenable Network Security has extracted the preceding...

CVE-2017-0635

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1,...

CVE-2015-5436: Undefined Security Weakness

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

CVE-2017-8843

The joinpthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive...

SUSE SLED12 Security Update : libosip2 (SUSE-SU-2017:1187-1)

This update for libosip2 fixes several issues. These security issues were fixed : - CVE-2017-7853: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS bsc1034570. -...

CVE-2017-8372

The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file...

CVE-2017-8378

Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors related to moffsets.size...

MySQL 5.6.35 / 5.7.17 Integer Overflow

''' Source: https://raw.githubusercontent.com/SECFORCE/CVE-2017-3599/master/cve-2017-3599poc.py Exploit Title: Remote MySQL DOS Integer Overflow Google Dork: N/A Date: 13th April 2017 Exploit Author: Rodrigo Marcos Vendor Homepage: https://www.mysql.com/ Software Link:...

MySQL < 5.6.35 / < 5.7.17 - Integer Overflow

''' Source: https://raw.githubusercontent.com/SECFORCE/CVE-2017-3599/master/cve-2017-3599poc.py Exploit Title: Remote MySQL DOS Integer Overflow Google Dork: N/A Date: 13th April 2017 Exploit Author: Rodrigo Marcos Vendor Homepage: https://www.mysql.com/ Software Link:...

MySQL 5.6.35 5.7.17 - Integer Overflow

MySQL 5.6.35 5.7.17 - Integer Overflow ''' Source: https://raw.githubusercontent.com/SECFORCE/CVE-2017-3599/master/cve-2017-3599poc.py Exploit Title: Remote MySQL DOS Integer Overflow Google Dork: N/A Date: 13th April 2017 Exploit Author: Rodrigo Marcos Vendor Homepage: https://www.mysql.com/...

PT-2017-1948

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-5 Description The issue is related to the ReadJNGImage function in png.c, which allows attackers to cause a denial of service memory leak via a crafted file. This is due to a buffer overflow in memory. Exploitation of...

openSUSE: Security Advisory for libosip2 (openSUSE-SU-2017:1127-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libosip2 (important)

This update for libosip2 fixes the following issues: Changes in libosip2: - CVE-2017-7853: In libosip2 in GNU 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS. boo1034570 -...

PT-2018-3496

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.3.6.x through 1.3.6.12 389-ds-base versions 1.3.7.x through 1.3.7.8 389-ds-base versions 1.4.x through 1.4.0.4 Description: A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search...

Cisco ASA Software IKEv1 XAUTH Parameter Handling Remote DoS (cisco-sa-20170419-asa-xauth)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code due to improper validation of the IKEv1 XAUTH paramete...

CVE-2016-9954

The backtrack compilation code in the Irregex package aka IrRegular Expressions before 0.9.6 for Scheme allows remote attackers to cause a denial of service memory consumption via a crafted regular expression with a repeating pattern...

CVE-2016-7516

The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted VIFF file...

PT-2017-18044

Name of the Vulnerable Software and Affected Versions libimobiledevice/libplist versions prior to 2017-04-19 Description The issue is related to an integer overflow in the plist from bin function in bplist.c, which allows remote attackers to cause a denial of service, resulting in a heap-based...