4393 matches found
CVE-2015-2785: Improper Restriction of Operations within the Bounds of a Memory Buffer
The GIF encoder in Byzanz allows remote attackers to cause a denial of service out-of-bounds heap write and crash or possibly execute arbitrary code via a crafted Byzanz debug data recording ByzanzRecording file to the byzanz-playback command...
CVE-2015-0679: Improper Input Validation
The web-authentication functionality on Cisco Wireless LAN Controller WLC devices 7.3103.8 and 7.4110.0 allows remote attackers to cause a denial of service device reload via a malformed password, aka Bug ID CSCui57980...
CVE-2015-0645
Cisco IOS XE Layer 4 Redirect (L4R) DoS vulnerability affects IOS XE 2.x–3.x before certain fixed releases, where the L4R feature mishandles crafted IPv4/IPv6 packets. An unauthenticated, remote attacker can trigger a device reload by sending malformed traffic, per Bug ID CSCuq59131. Affected ran...
CVE-2015-0646: Undefined Security Weakness
Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service memory consumption or device reload by...
CVE-2015-0637: Improper Input Validation
The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload via spoofed AN messages, aka Bug ID CSCup62315...
SUSE-SU-2015:0679-1 Security update for tcpdump
tcpdump was updated to fix five vulnerabilities in protocol printers When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities were fixed: IPv6 mobili...
CVE-2015-0654
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...
PT-2015-5870
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.0i Description The issue allows remote attackers to cause a denial of service stack corruption and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF." Recommendations For versions...
PT-2015-5869
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.0i Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted sector in a workbook. Recommendations For versions prior to 1.0.0i, update to version...
FreeBSD : rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities (d08f6002-c588-11e4-8495-6805ca0b3d42)
Best Practical reports : RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...
CVE-2015-2190
epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet that is improperly handled by the LLDP dissector...
CVE-2015-2177: Improper Input Validation
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
CVE-2015-0885: Undefined Security Weakness
checkpw 1.02 and earlier allows remote attackers to cause a denial of service infinite loop via a -- dash dash in a username...
CVE-2015-0632: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...
PT-2015-4771
Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS devices affected versions not specified Description A race condition exists in the SSL implementation, allowing remote attackers to cause a denial of service by making many management-interface HTTPS...
PT-2015-4761
Name of the Vulnerable Software and Affected Versions Cisco ASR 5500 System Architecture Evolution SAE Gateway devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and SNMP outage, by sending malformed SNM...
CVE-2015-0621: Undefined Security Weakness
Cisco TelePresence MCU devices with software 4.51.45 allow remote attackers to cause a denial of service device reload via an unspecified series of TCP packets, aka Bug ID CSCur50347...
CVE-2015-0593: Undefined Security Weakness
The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...
CVE-2015-1545
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...