The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted UDP packets remotely...

Vulnerabilities in the Libevent library, which allow a hacker to cause a service failure

The multiple vulnerabilities of the evbuffer software interface functions evbufferadd, evbufferprepend, evbufferexpand, exbufferreservespace, or evbufferread in the Libevent library are caused by integer overflows, which lead to overflow of buffers in dynamic memory or circularization. Exploitati...

The vulnerability of the Firefox OS operating system allows a hacker to trigger a service failure.

The vulnerability of the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the Firefox OS operating system is related to buffer overflows caused by integer overflows. Exploiting this vulnerability could allow a malicious actor to cause service failures by setting the buffer size...

UBUNTU-CVE-2015-6823

The allocatebuffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service segmentation violation or possibly have unspecified other impact via crafted Apple Lossless Audio Codec ALAC data...

The vulnerability of the Adobe AIR software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Adobe AIR software platform is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerabilities in the Google Chrome browser that allow a hacker to trigger a service failure

The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Firefox ESR browser, which allows a violator to trigger a service failure

The vulnerability of the nsXMLHttpRequest::AppendToResponseText method in Firefox ESR browsers is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Adobe AIR software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Adobe AIR software platform is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Wireshark WCP Dissector 'epan/dissectors/usb.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark. An attacker could exploit...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of Google Chrome’s browser in the implementation of SVG components arises from the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure by using a specially crafted document...

Security update for xen (important)

The XEN hypervisor was updated to fix two security issues: - Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. CVE-2015-3456 - Xen did not initialize certain fields, which allowed certain remote...

SUSE-SU-2015:0923-1 Security update for xen

XEN was updated to fix two security issues and bugs. Security issues fixed: CVE-2015-3340: Xen did not initialize certain fields, which allowed certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

CVE-2015-3340

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

CVE-2015-3340

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

Cross site request forgery (csrf)

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

CVE-2015-3340

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

CVE-2015-3340

CVE-2015-3340 affects Xen 4.2.x through 4.5.x and involves uninitialized fields, allowing certain remote domains to read sensitive memory content via XEN_DOMCTL_gettscinfo or XEN_SYSCTL_getdomaininfolist. Public advisories (e.g., Debian DSA-3414) classify this as a denial of information disclosur...

CVE-2015-3340: Exposure of Sensitive Information to an Unauthorized Actor

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

USN-2553-1 tiff vulnerabilities

William Robinet discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user...

Cisco IOS TCP Input Module Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A memory leak vulnerability exists in the Cisco IOS TCP input module, which allows remote attackers to conduct denial-of-service attacks via specially crafted TCP messages...