Denial of Service (DoS)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Denial of Service DoS via the endpoint for converting markdown. An attacker can cause the server to spend excessive time on processing, rendering it unresponsive to other requests until the conversion is...

CVE-2024-8063 Divide by Zero in ollama/ollama

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

The vulnerability of the amdgpu_dm_fini() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c driver module allows a hacker to cause a service failure in Linux-based AMD graphics cards that support Direct Rendering Infrastructure (DRI).

The vulnerability of the amdgpudmfini function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions 0x8001E000(), 0x8001E00C(), 0x8001E004(), and 0x8001E010() of the system file IURegistryFilter.sys in the IObit Uninstaller uninstaller software allows a malicious actor to cause a service failure.

The vulnerability of the functions 0x8001E000, 0x8001E00C, 0x8001E004, and 0x8001E010 of the system file IURegistryFilter.sys in the IObit Uninstaller uninstaller software is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/mgag200 components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/MGAG200 components in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the `__ftrace_return_to_handler()` function in the kernel/trace/fgraph.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ftracereturntohandler function in the kernel/trace/fgraph.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gve_xdp_xmit() function in the drivers for Google Virtual Ethernet Modules (gve) (drivers/net/ethernet/google/gve/gve_tx.c) in the kernel allows a hacker to cause a service failure.

The vulnerability of the gvexdpxmit function in the Google Virtual Ethernet Module driver drivers/net/ethernet/google/gve/gvetx.c in the Linux kernel is related to the pointer dereferencing issue due to the lack of zero-division checking. Exploiting this vulnerability can allow an attacker to cau...

The vulnerability of the nilfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the nilfs2 component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-34397

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...

CVE-2024-25724

In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to execute code with the affected service's privileges, compromise the service's integrity, leak...

CVE-2023-34397

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...

CVE-2023-34397

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...

Mercedes-Benz NTG 安全漏洞

Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz NTG that originates from a service crash when importing or exporting profile settings via USB...

CVE-2023-34397

CVE-2023-34397 affects Mercedes-Benz head-unit NTG 6. The vulnerability arises when importing or exporting user profile settings over USB; during parsing the service can crash, with the impact described as a high availability/partial impact scenario. Public documentation notes the USB subsystem a...

Mercedes-Benz NTG 安全漏洞

The Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz NTG that stems from a null pointer dereference in the Apple Car Play feature. An attacker exploiting the vulnerability could cause the Car Play service to crash...

The vulnerability of the Linux operating system’s kernel’s media component, allowing a hacker to execute arbitrary code

The vulnerability of the Linux operating system’s kernel media component is related to a numerical overflow in the tda10048setif function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the functions cs_dsp_coeff_parse_alg() and cs_dsp_coeff_parse_coeff() (located in the drivers/firmware/cirrus/cs_dsp.c file) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the functions csdspcoeffparsealg and csdspcoeffparsecoeff located in the drivers/firmware/cirrus/csdsp.c file in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the page_pool_dev_alloc_pages() function in the drivers/net/ethernet/freescale/fec_main.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pagepooldevallocpages function in the drivers/net/ethernet/freescale/fecmain.c file of the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions sock_set_flag() and spin_unlock() (net/ipv4/udp.c) in the Linux kernel’s UDP component allows a attacker to cause a service failure.

The vulnerabilities of the functions socksetflag and spinunlock net/ipv4/udp.c in the Linux kernel’s UDP component are related to resource management errors. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

Denial Of Service

GitLab is vulnerable to Denial of Service DoS. The vulnerability is due to the server's failure to safely process crafted OpenAPI files, and attackers can exploit this to consume excessive resources or crash the service, leading to a denial of service...