AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2023:5264)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5264 advisory. QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service CVE-2023-3354 NTFS-3G: buffer overflow issue i...

PT-2023-23110 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead t...

PT-2023-15807 · Unknown · Control De Ciber

Name of the Vulnerable Software and Affected Versions: Control de Ciber version 1.650 Description: The issue is a Denial of Service condition that affects Control de Ciber through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up ...

Race condition

GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...

Oracle Linux 8 : http-parser (ELSA-2019-3497)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-3497 advisory. - Resolves: rhbz1666382: CVE-2018-12121 http-parser: nodejs: Denial of Service with large HTTP headers rhel-8 Tenable has extracted the preceding description...

The vulnerability of the $resource service in the Angular application and single-page application development platforms, related to the use of a regular expression with inefficient computational complexity, allows attackers to trigger service failures.

The vulnerability of the application development environment and the Angular single-page application platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2023-28187

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service...

SUSE-SU-2023:3533-1 Security update for python-Django1

This update for python-Django1 fixes the following issues: - CVE-2023-41164: Fixed a potential denial of service vulnerability in django.utils.encoding.uritoiri bsc1214667...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the ims service...

PT-2023-26456 · Unknown · Urild Service

Name of the Vulnerable Software and Affected Versions: urild service affected versions not specified Description: The issue is related to a missing bounds check in the urild service, which could lead to a possible out of bounds write. This might result in a local denial of service, and it require...

PT-2023-24044 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-24043 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds write in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

GNU Binutils stab_demangle_v3_arg function memory leak vulnerability

GNU Binutils is a set of tools for working with binary files. GNU Binutils has a memory leak vulnerability that originates from a memory leak in the stabdemanglev3arg function in the stabs.c file. An attacker could exploit this vulnerability to cause a denial of service...

SUSE-SU-2023:3435-1 Security update for clamav

This update for clamav fixes the following issues: - Update to 0.103.9 - CVE-2023-20197: Fixed a possible denial of service vulnerability in the HFS+ file parser. bsc1214342...

PT-2023-4929 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the DDP service, resulti...

CVE-2020-22916

An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of "endless output" and "denial of service" because decompression of the 17,486 bytes always results in 114,881,179 bytes, which is often a...

SUSE-SU-2023:3368-1 Security update for python-configobj

This update for python-configobj fixes the following issues: - CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py bsc1210070...

CVE-2022-37052

A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject...

CVE-2022-48571

memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP...

Rockwell Automation ThinManager ThinServer Denial of Service Vulnerability

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. A denial of service vulnerability exists in Rockwell Automation Thinmanager Thinserver, which can be exploit...