squid: denial of service issue in HTTP response processing

An incorrect boundary check was found in the way squid handled the Vary header in HTTP responses, which could lead to an assertion failure. A malicious HTTP server could use this flaw to crash squid using a specially crafted HTTP response...

FreeFTPd 'mkd' Denial of Service Vulnerability

FreeFTPd is a free FTP, FTPS, SFTP server product. The product supports remote file transfers and more. A denial of service vulnerability exists in freeFTPd version 1.0.8, which can be exploited by attackers to cause a denial of service program crash...

Baby FTP server 1.24 - Denial of Service (2)

!/usr/bin/python Baby FTP 1.24 - Denial of Service by n30m1nd Date: 2016-10-27 PoC Author: n30m1nd Vendor Homepage: http://www.pablosoftwaresolutions.com/ Software Link: http://www.pablosoftwaresolutions.com/download.php?id=1 Version: 1.24 Tested on: Win7 64bit and Win10 64 bit Credits =======...

OpenSSL OCSP Status Request Extension Unbounded Memory Growth Vulnerability

Multiple memory leaks in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service memory consumption via large OCSP Status Request extensions.The exploit allows to take advantage of this vulnerability. When successfully exploited, the...

PT-2016-6495 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.6.32 and earlier Oracle MySQL versions 5.7.14 and earlier Description: The issue allows remote administrators to affect availability via vectors related to Server: InnoDB. It is an easily exploitable vulnerability that...

SUSE SLED12 Security Update : freerdp (SUSE-SU-2016:2506-1)

This update for freerdp fixes the following issues : - CVE-2013-4118: Added a NULL pointer check to fix a server crash bsc829013. - CVE-2014-0791: Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP allowed remote RDP servers to cause a denial of service...

mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute

It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash...

mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute

It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash...

mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute

It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash...

CVE-2016-4459

It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash...

FreeBSD : libvncserver -- multiple security vulnerabilities (cb3f036d-8c7f-11e6-924a-60a44ce6887b)

Nicolas Ruff reports : Integer overflow in MallocFrameBuffer on client side. Lack of malloc return value checking on client side. Server crash on a very large ClientCutText message. Server crash when scaling factor is set to zero. Multiple stack overflows in File Transfer feature. %NASLMINLEVEL...

Error: Logical Volume mount/activate error when trying to plug the Local Storage

After a server crash, the Local storage is unplugged and when trying to plug it back it gives the following error xe pbd-plug uuid=xxxx-xxxxxx-xxxxx-xxxxxError code: SRBACKENDFAILURE52Error parameters: , Logical Volume mount/activate error opterr=FSCK failed on...

CVE-2016-6172

PowerDNS aka pdns Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service memory exhaustion and secondary DNS server crash via a large 1 AXFR or 2 IXFR response...

CVE-2016-3110

modcluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service Apache http server crash via an MCMP message containing a series of = equals characters after a legitimate element...

CVE-2016-3110

modcluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service Apache http server crash via an MCMP message containing a series of = equals characters after a legitimate element...

PT-2016-6599 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.51 and earlier Oracle MySQL versions 5.6.32 and earlier Oracle MySQL versions 5.7.14 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to GIS. It is an...

Unable to propagate the changes and the configuration replication service crashes at the server.

Under certain circumstances, StoreFront may be unable to propagate the changes between servers and the configuration replication service may experience a crash...

postgresql: multiple issues

CVE-2016-5423 arbitrary code execution It was discovered that certain SQL statements containing CASE/WHEN commands could crash the PostgreSQL server, or disclose a few bytes of server memory, potentially leading to arbitrary code execution. - CVE-2016-5424 privilege escalation It was found that...

Apache Httpd < 2.4.25 : DoS vulnerability in mod_auth_digest

Malicious input to modauthdigest will cause the server to crash, and each instance continues to crash even for subsequently valid requests...

UBUNTU-CVE-2016-6170

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...