SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2487-1)

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may have allowed an...

SUSE-SU-2020:2487-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may have allowed an...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2020-1924)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Distance Vector Multicast Routing Protocol (DVMRP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Distance Vector Multicast Routing Protocol DVMRP implementation in the Cisco IOS XR operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to uncontrolled resource consumption, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service interruptions remotely...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2020-1924)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage...

CVE-2019-5645: Uncontrolled Resource Consumption

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on th...

CVE-2020-14522

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition...

CVE-2020-14522

CVE-2020-14522 affects Softing Industrial Automation OPC products: all versions prior to the latest build of 4.47.0 are vulnerable to uncontrolled resource consumption that can lead to a denial-of-service. Affected component is OPC servers/services; root cause described as uncontrolled resource c...

CVE-2020-14522 Softing Industrial Automation OPC

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition...

PT-2020-14055

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation versions prior to 4.47.0 Description The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition. Recommendations For versions prior ...

CVE-2020-14522: Uncontrolled Resource Consumption

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition...

The vulnerability of the module for working with ZIP files by the zipfile Python package, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the zipfile library for working with ZIP files in Python-related software packages is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a malicious ZIP archive known as a “ZIP bomb”...

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container leading to denial of service (resource consumption) aka a "better zip bomb" issue.

...

USN-4456-2: Dovecot vulnerabilities

USN-4456-1 fixed several vulnerabilities in Dovecot. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to cause Dovecot to...

CVE-2020-13281: Uncontrolled Resource Consumption

For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...

Ubuntu: Security Advisory (USN-4456-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

CVE-2020-12100

CVE-2020-12100 affects Dovecot before 2.3.11.3, where uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause resource exhaustion/denial of service via a crafted email with deeply nested MIME parts. The issue is addressed by upgrading to a fixed version (2.3.11.3 or n...

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...