CVE-2016-2569: Improper Input Validation

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service assertion failure and daemon exit via a long string, as demonstrated by a crafted HTTP Vary header...

PT-2016-5180

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted packet. This is due to the dissect ber constrained...

FreeBSD : squid -- remote DoS in HTTP response processing (660ebbf5-daeb-11e5-b2bd-002590263bf5)

Squid security advisory 2016:2 reports : Due to incorrect bounds checking Squid is vulnerable to a denial of service attack when processing HTTP responses. These problems allow remote servers delivering certain unusual HTTP response syntax to trigger a denial of service for all clients accessing...

openSUSE Security Update : ffmpeg (openSUSE-2016-246)

This update to ffmpeg 2.8.6 fixes the following issues : - CVE-2016-2329: Remote DoS via crafted TIFF files boo966674 VLC was updated to 2.8.6, containing various other upstream bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2015-5332

Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...

CVE-2016-0795

LibreOffice before 5.0.5 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro lwp document...

CVE-2016-1987: Improper Input Validation

HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets...

FreeBSD : squid -- SSL/TLS processing remote DoS (56562efb-d5e4-11e5-b2bd-002590263bf5)

Squid security advisory 2016:1 reports : Due to incorrectly handling server errors Squid is vulnerable to a denial of service attack when connecting to TLS or SSL servers. This problem allows any trusted client to perform a denial of service attack on the Squid service regardless of whether TLS o...

CVE-2016-0742: NULL Pointer Dereference

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...

CVE-2016-2329

CVE-2016-2329 affects FFmpeg before 2.8.6, specifically the libavcodec/tiff.c flow. The vulnerability arises from improper validation of RowsPerStrip values and YCbCr chrominance subsampling factors in TIFF decoding, enabling a remote attacker to cause a denial of service via out-of-bounds array ...

Android Memory Corruption Vulnerability (CNVD-2016-01096)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. mediaserver is one of the multimedia service components. A security vulnerability exists in the libstagefright library in Android's mediaserver. The vulnerability can be exploited ...

CVE-2016-0044: Improper Input Validation

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

PT-2016-5061

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU devices versions prior to 1.8.3 Description The issue allows remote attackers to cause a denial of service, resulting in a STOP mode transition, by sending crafted packets on TCP port 102. Recommendations For versio...

PT-2016-3511

Name of the Vulnerable Software and Affected Versions imlib2 versions prior to 1.4.7 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by using a GIF image without a colormap. Recommendations For versions prior to 1.4.7, update to versi...

PT-2016-3512

Name of the Vulnerable Software and Affected Versions imlib2 versions prior to 1.4.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted PNM file. Recommendations For versions prior to 1.4.7, update t...

PT-2016-3513

Name of the Vulnerable Software and Affected Versions imlib2 versions prior to 1.4.7 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by using a crafted GIF file. Recommendations For versions prior to 1.4.7, update to version 1.4.7 or...

CVE-2016-1946: Improper Restriction of Operations within the Bounds of a Memory Buffer

The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service integer overflow and buffer overflow or possibly have unspecified other impact v...

CVE-2016-1303: Improper Input Validation

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...

CVE-2016-0737: Undefined Security Weakness

OpenStack Object Storage Swift before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service proxy-server resource consumption via a series of interrupted requests to a Large Object URL...

php: Security update (7 CVEs)

The php package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 5.6.8-1 = 5.6.17-1 CHANGELOG Sun, 24 Jan 2016 21:47:52 +0100 18d121b Update to 5.6.17 Fixes CVE-2016-1903. Wed, 23 Dec 2015 16:00:14 -0500 766cfcc Update to 5.6.16 Wed, ...