2388 matches found
CVE-2018-1318
Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server ATS 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrad...
CVE-2018-8022
A carefully crafted invalid TLS handshake can cause Apache Traffic Server ATS to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions...
CVE-2018-1318
CVE-2018-1318 affects Apache Traffic Server. The issue arises when adding method ACLs in remap.config, which can cause a segmentation fault under crafted requests. Vulnerable ATS versions: 6.0.0–6.2.2 and 7.0.0–7.1.3. Impact described as a segfault when handling certain inputs; no exploit details...
CVE-2018-1318
Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server ATS 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrad...
CVE-2018-8022
CVE-2018-8022 affects Apache Traffic Server (ATS) 6.2.2. A specially crafted invalid TLS handshake can cause ATS to segfault, leading to a partial availability impact (DoS) as described in multiple sources. The concrete vulnerable component is the TLS handshake handling within ATS; the root cause...
CVE-2018-1318
Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server ATS 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrad...
PT-2018-11659
Name of the Vulnerable Software and Affected Versions Apache Traffic Server ATS versions 6.0.0 through 6.2.2 Apache Traffic Server ATS versions 7.0.0 through 7.1.3 Description The issue arises when method ACLs are added in remap.config, potentially causing a segfault upon a carefully crafted...
PT-2018-18387
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server version 6.2.2 Description: A carefully crafted invalid TLS handshake can cause Apache Traffic Server to crash, resulting in a segfault. Recommendations: For Apache Traffic Server version 6.2.2, upgrade to version 6.2.3 o...
CVE-2018-8022: Improper Input Validation
A carefully crafted invalid TLS handshake can cause Apache Traffic Server ATS to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions...
CVE-2018-1318: Improper Input Validation
Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server ATS 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrad...
Apache 2.4.x < 2.4.34 Multiple Vulnerabilities
According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.34. It is, therefore, affected by the following vulnerabilities: - By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a...
openSUSE Security Update : util-linux (openSUSE-2018-805)
This update for util-linux fixes the following issues : This non-security issue was fixed : - CVE-2018-7738: bash-completion/umount allowed local users to gain privileges by embedding shell commands in a mountpoint name, which was mishandled during a umount command by a different user bsc1084300...
Security update for util-linux (moderate)
This update for util-linux fixes the following issues: This non-security issue was fixed: - CVE-2018-7738: bash-completion/umount allowed local users to gain privileges by embedding shell commands in a mountpoint name, which was mishandled during a umount command by a different user bsc1084300...
CVE-2018-14944
An issue has been found in jpegencoder through 2015-11-27. It is a SEGV in the function readFromBMP in jpegencoder.cpp. The signal is caused by an out-of-bounds write...
CVE-2015-9261
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
CVE-2015-9261
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
CVE-2015-9261: NULL Pointer Dereference
huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
PYSEC-2018-61
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...