ntpd 4.2.7.p22 / 4.3.0 Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2016-7434 ntpd remote pre-auth Denial of Service +----------------------------------------------------------------------------------------------+ Affected: ntp-4.2.7p22, up to but not including ntp-4.2.8p9, and ntp-4.3.0 up to, but not including...

F5 BIG-IP - TMM vulnerability CVE-2016-7476

The Traffic Management Microkernel TMM may suffer from a memory leak while handling certain types of TCP traffic. CVE-2016-7476 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD : FreeBSD -- OpenSSL Remote DoS vulnerability (0fcd3af0-a0fe-11e6-b1cf-14dae9d210b8)

Due to improper handling of alert packets, OpenSSL would consume an excessive amount of CPU time processing undefined alert messages. Impact : A remote attacker who can initiate handshakes with an OpenSSL based server can cause the server to consume a lot of computation power with very little...

FreeBSD-SA-16:35.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:35.openssl Security Advisory The FreeBSD Project Topic: OpenSSL Remote DoS vulnerability Category: contrib Module: openssl Announced: 2016-11-02 Affects:...

FreeBSD -- OpenSSL Remote DoS vulnerability

Problem Description: Due to improper handling of alert packets, OpenSSL would consume an excessive amount of CPU time processing undefined alert messages. Impact: A remote attacker who can initiate handshakes with an OpenSSL based server can cause the server to consume a lot of computation power...

CVE-2016-8875

The CVE-2016-8875 entry concerns Foxit Reader and Foxit PhantomPDF (Windows) with the ConvertToPDF plugin. When the gflags utility is enabled, a specially crafted TIFF image can trigger an out-of-bounds read, causing a DoS (crash) in CreateFXPDFConvertor. This is associated with the ConvertToPDF_...

Juniper Junos IPv6 Packet Handling Remote DoS (JSA10762)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the IPV6 implementation. An unauthenticated, remote attacker can exploit this, via a flood of specially crafted IPv6 traffic, to exhaust available...

SUSE SLES11 Security Update : xen (SUSE-SU-2016:2528-1) (Bunker Buster)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-7094: Buffer overflow in Xen allowed local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update bsc995792 - CVE-2016-7092: The getpagefroml3e...

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

CVE-2016-1371

ClamAV before 0.99.2 is affected by CVE-2016-1371 and CVE-2016-1372 (and related issues) due to parsing crafted mew packer and 7z files, enabling remote DoS or application crash. Affected component is libclamav/clamav daemons prior to 0.99.2; impact is partial availability denial of service. Debi...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-3634

CVE-2016-3634 affects LibTIFF up to version 4.0.6. The vulnerability exists in the tagCompare function in tif_dirinfo.c used by the thumbnail tool, causing an out-of-bounds read and potential crash (denial of service). Remediation per connected advisories is to upgrade to LibTIFF 4.0.7 or newer.

Cisco IOS XE NTP Packet Handling Remote DoS (cisco-sa-20160804-wedge)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to insufficient checks on clearing invalid Network Time Protocol NTP packets from the interface queue. An unauthenticated, remote...

Kodi Web Server 16.1 - Denial of Service

Exploit Title: Kodi 16.1 Web Server Remote DoS Date: 06/08/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: https://kodi.tv/ Software Link:...

Palo Alto Networks PAN-OS Management Interface API Remote DoS (PAN-SA-2016-0008)

The Palo Alto Networks PAN-OS running on the remote host is affected by a denial of service vulnerability in the API hosted on the management interface, specifically in the panUserLogin function within panmodule.so, due to improper validation of user-supplied input to the 'username' and 'password...

Cisco IOS LLDP Packet Handling Remote DoS (cisco-sa-20160616-ios)

According to its self-reported IOS version, the remote device is affected by a denial of service vulnerability in the Link Layer Discovery Protocol LLDP packet processing code due to improper handling of malformed LLDP packets. An unauthenticated, adjacent attacker can exploit this, via specially...

SUSE SLES11 Security Update : libksba (SUSE-SU-2016:1509-1)

This update for libksba fixes the following issues : - CVE-2016-4579: Out-of-bounds read in ksbaberparsetl - CVE-2016-4574: two OOB read access bugs remote DoS bsc979261 Also adding reliability fixes from v1.3.4. Note that Tenable Network Security has extracted the preceding description block...

Cogent DataHub < 6.4.7 Incoming DDE Connection Handling Remote DoS

Binary data scadacogentdatahub647.nbin...

Cogent DataHub < 6.4.3 OPC Client Reconnection Saturation Remote DoS

Binary data scadacogentdatahub643.nbin...

MongoDB mongod Malformed X.509 Certificate Handling Remote DoS Vulnerability - Linux

MongoDB is prone to remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb";...