ALPINE-CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

The vulnerability of the parse_report() function in the whoopsie error logging service allows a violator to trigger a service failure.

The vulnerability of the parsereport function in the whoopsie error reporting service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure using a specially crafted file...

Denial-of-service

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns. When parsing mDNS messages in mdnsrecv, the return value of the mdnsreadheader function is not checked, leading to an uninitialized variable usage that eventually results in a null...

The vulnerability of the vmnetdhcp service in VMware Fusion and VMware Workstation allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the vmnetdhcp service in VMware Fusion and VMware Workstation lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

dovecot: malformed NOOP commands leads to DoS

A flaw was found in Dovecot, where it did not properly handle certain malformed NOOP commands. This flaw allows a malicious attacker to cause the submission, submission-login, or lmtp services to crash by sending specially crafted commands...

CVE-2020-8916

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.

The vulnerability of the Connected User Experience and Telemetry Service services of Microsoft Windows lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

OpenText Webroot endpoint agents type confusion vulnerability

OpenText Webroot endpoint agents is an endpoint security protection agent program from OpenText Canada. A type confusion vulnerability exists in versions prior to OpenText Webroot endpoint agents v9.0.28.48. The vulnerability stems from the system failing to properly check the type of input. An...

The vulnerability of the Local Download Sharing Service, a traffic analyzer for computer networks by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the Local Download Sharing Service, a traffic analyzer for computer networks in Wireshark, is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the WritePNMImage function (coders/pnm.c) in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure and expose sensitive information.

The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures and expose sensitive informati...

The vulnerability of the MediaInfoLib::File__Tags_Helper::Synched_Test function (Tag/File__Tags.cpp) in the MediaInfo metadata reading library allows a attacker to cause a service failure.

The vulnerability of the MediaInfoLib::FileTagsHelper::SynchedTest function Tag/FileTags.cpp, which is part of the MediaInfo metadata reading library, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the asn1_get_type function in the libcups printing server library allows a attacker to cause a service failure.

The vulnerability of the asn1gettype function in the libcups printing server library is due to a buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

CVE-2020-3344

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi...

CVE-2020-3343 Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi...

The vulnerability of the Windows DNS service for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows DNS service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted DNS requests...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in the configuration daemon in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability with a specially crafted request to...

CVE-2020-6240

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

The vulnerability of the get_line() function in the .fig conversion utility for fig2dev allows a hacker to cause a service failure.

The vulnerability of the getline function in the .fig conversion utility for the fig2dev extension is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created .fig fi...

The vulnerability of the ReadCUTImage function in the console-based image editing tool ImageMagick, related to the use of uninitialized resources, allows attackers to access confidential information or cause service failures.

The vulnerability of the ReadCUTImage function in the console-based ImageMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

The vulnerability of the ptrace_link function in Linux operating systems allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the ptracelink function in Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause system failures or increase their privileges by using the system call execve...