The vulnerability of the elf64-x86-64.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the elf64-x86-64.c component of the GNU Binutils development environment is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

The vulnerability of the `concat_filename` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the concatfilename function in the dwarf2.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability of the elf_object_p function in the bfd/elfcode.h component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the elfobjectp function in the bfd/elfcode.h component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the `simple_object_elf_match` function in the `libiberty/simple-object-elf.c` development toolset of the GNU Binutils allows a attacker to trigger a service failure.

The vulnerability of the simpleobjectelfmatch function in the libiberty/simple-object-elf.c development tool of the GNU Binutils library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

The vulnerability lies in the implementation of “chain” compression mechanisms for the HTTP utility tool cURL, which allows a attacker to trigger a service failure.

The vulnerability of the “chain” compression mechanism implemented in the CURL command-line utility relates to the ability to perform an infinite number of decompression steps of server HTTP responses, which can lead to uncontrolled memory consumption. Exploiting this vulnerability allows a remot...

The vulnerability of the H5Dchunk.c component in the HDF5 file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Dchunk.c component in the HDF5 file processing library is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created HDF file...

The vulnerability of the _libssh2_packet_add function in the libssh2 component of the SSH2 implementation library Libssh2 allows a attacker to cause a service failure.

The vulnerability of the libssh2packetadd function in the libssh2 component of the SSH2 implementation library is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the compiler for processing Markdown Marked, related to incorrect handling of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the compiler for processing Markdown marked text is related to incorrect handling of regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

AZL-37024 CVE-2023-3961 affecting package samba 4.18.3-2

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call RPC services like SAMR LSA or SPOOLSS, which Samba initiates o...

The vulnerability of the Control Protocol Director (l2cpd) in Juniper Networks’ Junos and JunOS Evolved operating systems allows a attacker to induce a service failure.

The vulnerability of the Control Protocol Layer 2 l2cpd in Juniper Networks’ Junos and JunOS Evolved operating systems is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2023-46278

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication...

CVE-2023-46278

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication...

Design/Logic Flaw

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication...

The vulnerability of multi-platform software for local development and website debugging, caused by buffer overflows, allows attackers to trigger service failures.

The vulnerability of multi-platform software for local website development and debugging is due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2023-46278

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication...

CVE-2023-46278

Cybersecurity CVE-2023-46278 affects Cybozu Remote Service (4.1.0–4.1.1). The root cause is an uncontrolled resource consumption that can be triggered by a remote authenticated user, leading to huge storage space usage or significantly delayed communications. Remediation is to update to a vendor-...

Cybozu Remote Service vulnerable to uncontrolled resource consumption

Overview Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact Certain operations performed by a logged-in user may lead to huge storage...

JVN#94132951: Cybozu Remote Service vulnerable to uncontrolled resource consumption

Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Impact Certain operations performed by a logged-in user may lead to huge storage space consumption or significantly delayed communication. Solution Update the Software Update the software to...

PT-2023-29941 · Cybozu · Cybozu Remote Service

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 4.1.0 through 4.1.1 Description: The issue allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication due to an uncontrolled resource consumption...