The vulnerability of the rfc822.c component in the Mutt email client, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the rfc822.c component in the Mutt email client is related to incorrect processing of the comma-separated list of addresses in RFC822 fields. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

UBUNTU-CVE-2020-22885

Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service...

The vulnerability of Huawei’s microprogram code in software-hardware devices, related to memory leaks, allows attackers to trigger service failures.

The vulnerability of Huawei’s microprogramming code in software and hardware devices is related to memory leaks. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Western Digital WD My Book Live and WD My Book Live Duo disk storage devices stems from authentication procedures that have flaws. This allows attackers to reset the device to its factory settings.

The vulnerability of the microprogrammed software in Western Digital WD My Book Live and WD My Book Live Duo storage devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the ImageMagick image processing component, a console-based graphic editor, relates to reading data beyond the allowed buffer size. This allows attackers to cause service interruptions.

The vulnerability of the ImageMagick image processing component relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the opj_dwt_calc_explicit_stepsizes() function in the OpenJPEG image encoding and decoding library lies in the lack of a mechanism to verify the size of the copied data. This allows an attacker to trigger a service failure.

The vulnerability of the opjdwtcalcexplicitstepsizes function in the OpenJPEG image encoding and decoding library is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to trigger a service failure remotely...

The vulnerability of the JPXStream::init function in the Poppler PDF rendering library, related to integer overflow of the value being filled, allows a attacker to cause a service failure.

The vulnerability of the JPXStream::init function in the Poppler PDF rendering library is related to the lack of checks for negative stream lengths. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the `get_next_block` function of the `archival/libarchive/decompress_bunzip2.c` component of the BusyBox command-line utility tools on UNIX systems, related to integer overflows, allows a malicious actor to cause a service failure.

The vulnerability in the getnextblock function of the archival/libarchive/decompressbunzip2.c component of the BusyBox command-line utility set is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability of the console-based graphic editor ImageMagick, related to excessive iteration, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to excessive iteration. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created mng image...

The vulnerability of the SMLLexer function in the Pygments library allows a hacker to trigger a service failure.

The vulnerability of the SMLLexer function in the Pygments library is related to an infinite loop due to input. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

PT-2021-7739 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions through 2020-06-22 Description: A global buffer overflow vulnerability in the jfif encode function at jfif.c:701 of the ffjpeg library allows attackers to cause a Denial of Service DOS via a crafted jpeg file. The vulnerabilit...

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation systems allows a intruder to trigger a service failure.

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerabilities of operating systems such as macOS, watchOS, iOS, iPadOS, tvOS, and the iCloud for Windows service, related to resource release errors, allow a perpetrator to trigger a service failure.

The vulnerabilities of operating systems such as macOS, watchOS, iOS, iPadOS, tvOS, and the iCloud for Windows service are related to resource release errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

The vulnerability of the Squid proxy server arises from insufficient validation of the data entered by users during the sending of HTTP responses. This allows attackers to trigger a service failure.

The vulnerability of the Squid proxy server exists due to insufficient validation of the data entered by users when sending HTTP responses. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of the Squid proxy server arises from insufficient input validation when resolving resource identifiers like “urn:”, allowing attackers to trigger a service failure.

The vulnerability of the Squid proxy server exists due to insufficient input validation when resolving resource identifiers with the “urn:” prefix. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Kill chains: Part 1→Strategic and operational value

It really is a good thing The term “kill chain” sounds extremely harsh. Almost as if after something is killed, it gets moved down the chain to be killed again. How dramatic! Indeed, the original definition was to describe how an enemy combatant of the military might attack; that is, the steps th...

The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software allows a hacker to trigger a maintenance failure.

The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to trigger service failure remotely...

The vulnerability of the Macro Analysis module in the ClamAV antivirus software package allows a hacker to trigger a service failure.

The vulnerability of the Excel XLM module in the ClamAV antivirus software package exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...