CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2017-7395

In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

UBUNTU-CVE-2017-7395

In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2017-7395

In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...

CVE-2017-7394

TigerVNC vulnerability CVE-2017-7394 affects TigerVNC 1.7.1: SSecurityPlain::processMsg allows unauthenticated users to crash the server by sending long usernames. The linked Nessus/Gentoo/EulerOS entries confirm this CVE among other TigerVNC issues, with impact described as a denial of service v...

CVE-2015-8762

The CVE-2015-8762 entry concerns the EAP-PWD module in FreeRADIUS versions 3.0 through 3.0.8. The vulnerability allows remote attackers to cause a denial of service via a zero-length EAP-PWD packet, triggering a NULL pointer dereference that can crash the server. Connected sources consistently re...

NTP Local Stack Buffer Overflow Vulnerability

Network Time Protocol NTP is a protocol used to synchronize computer time. NTP suffers from a local stack buffer overflow vulnerability, where an attacker can cause a stack buffer overflow by sending a constructed response to a malicious server, resulting in a crash or arbitrary code execution...

spice: Remote DoS via crafted message

A vulnerability was discovered in SPICE in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash...

spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages

A vulnerability was discovered in SPICE in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution...

Insufficient Error Handling

Overview Affected versions of http-proxy are vulnerable to a denial of service attack, wherein an attacker can force an error which will cause the server to crash. Recommendation Update to version 0.7.0 or later. References - PR 101 - GitHub Advisory...

TP-Link C2 and C20i Denial of Service Vulnerability

TP-Link is a Chinese manufacturer of network equipment such as routers and IOT devices. A denial of service vulnerability exists in TP-Link C2 and C20i. An attacker can exploit the vulnerability to cause a denial of service by sending an HTTP request to the affected device, crashing the HTTP serv...

DEBIAN-CVE-2016-6173

NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...

Code injection

NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...

CVE-2016-6171

Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service memory exhaustion and slave server crash via a large zone transfer for 1 DDNS, 2 AXFR, or 3 IXFR...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash using network packets...

UBUNTU-CVE-2016-9578

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash...

RHEL 7 : spice (RHSA-2017:0254)

An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...