IBM Tivoli Endpoint Manager Multiple Vulnerabilities (Aug 2017)

IBM Tivoli Endpoint Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-1383: Improper Restriction of XML External Entity Reference

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155...

CVE-2017-1227

IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906...

CVE-2017-1227

CVE-2017-1227 concerns IBM Tivoli Endpoint Manager (BigFix/TEM). The NVD entry states that an unauthenticated user could exhaust resources and crash the system (availability impact). CVSSv3 base score 7.5 (HIGH) with NETWORK attack vector, no user interaction, and high impact on availability. In ...

Denial Of Service (DoS) Through Resource Consumption

Moodle is vulnerable to denial of service DoS attacks. The script used when geo-mapping an IP address was accessible by attackers, by requesting the calculation of an estimated latitude and longitude for an IP, attackers are able to consume all the resources...

Resource consumption vulnerability in multiple Huawei phones

Huawei P9 and others are smartphones from the Chinese company Huawei Huawei. A resource consumption vulnerability exists in several Huawei phones. An attacker can exploit the vulnerability by tricking users into installing a malicious application that may turn on the phone's flash and quickly dra...

PT-2017-17451

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.3 Description The issue involves the EventKitUI component and allows remote attackers to cause a denial of service, resulting in resource consumption and application crash. Recommendations For iOS versions prior to...

CVE-2017-7007: Uncontrolled Resource Consumption

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "EventKitUI" component. It allows remote attackers to cause a denial of service resource consumption and application crash...

PT-2017-3925

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.57 and earlier Oracle MySQL versions 5.6.37 and earlier Oracle MySQL versions 5.7.19 and earlier Description The issue is related to an uncontrolled consumption of system resources in the MySQL Server component of...

PT-2017-2562

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.9-0 ImageMagick versions 7.x prior to 7.0.6-1 Description The issue is related to the ReadDPXImage function in ImageMagick, which is associated with an uncontrolled resource consumption. This can be exploited ...

PT-2017-2563

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.9-0 ImageMagick versions 7.x prior to 7.0.6-1 Description The issue is related to the ReadOneMNGImage function, which allows remote attackers to cause a denial of service due to large loop and CPU consumption...

CVE-2017-7684: Uncontrolled Resource Consumption

Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server...

CVE-2017-2348: Uncontrolled Resource Consumption

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...

Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2017-1108)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PT-2017-19213

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.40 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, via a crafted DIAG request. Recommendations For SAP NetWeaver version 7.40, apply the fix as described in...

CVE-2017-9845: Uncontrolled Resource Consumption

disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service resource consumption via a crafted DIAG request, aka SAP Security Note 2405918...

CVE-2017-11140

The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial of service resource consumption via crafted JPEG files...

CVE-2017-11140

The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial of service resource consumption via crafted JPEG files...

CVE-2017-11140

The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial of service resource consumption via crafted JPEG files...

CVE-2017-11140: Uncontrolled Resource Consumption

The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial of service resource consumption via crafted JPEG files...