Denial Of Service (DoS)

libaudiofile.so is susceptible to denial of service DoS attacks. The attacker can send a malicious audio file to the MSADPCM::initializeCoefficients function in MSADPCM.cpp to cause a heap-based buffer overflow, crashing the application...

Solaris power lifting vulnerability (CNVD-2018-13658)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Availability Suite Service subcomponent of the Solaris version 10 and 11.3 components of the Oracle Sun Systems...

SUSE-SU-2018:1892-1 Security update for nodejs6

This update for nodejs6 to version 6.14.3 fixes the following issues: The following security vulnerability was addressed: - Fixed a denial of service DoS vulnerability in Buffer.fill, which could hang when being called CVE-2018-7167, bsc1097375. The following other changes were made: - Use absolu...

SUSE-SU-2018:1885-1 Security update for libvorbis

This update for libvorbis fixes the following issues: The following security issue was fixed: - Fixed the validation of channels in mapping0forward, which previously allowed remote attackers to cause a denial of service via specially crafted files CVE-2018-10392, bsc1091070...

Dell EMC RecoverPoint < 5.1.2 - Remote Root Command Execution Vulnerability

Exploit for linux platform in category remote exploits Exploit Title: Dell EMC RecoverPoint 5.1.2 - Remote Root Command Execution Version: All versions before RP 5.1.2, and all versions before RP4VMs 5.1.1.3 Vendor KB: https://support.emc.com/kb/521234 Github:...

Security Bulletin: A security vulnerability with net-snmp affects IBM Flex System Manager (CVE-2015-3565)

Summary A security vulnerability has been identified in net-snmp that is used by IBM Flex System Manager FSM. This bulletin addresses this vulnerability. Vulnerability Details CVEID: CVE-2014-3565 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by the improper handling of SNMP...

Security Bulletin: API Connect is affected by a Node.js denial of service vulnerability (CVE-2017-14919)

Summary IBM API Connect has addressed the following vulnerability. Node.js is vulnerable to a denial of service, caused by an uncaught exception flaw in the zlib module. By making 8 an invalid value for the windowBits parameter, a remote attacker could exploit this vulnerability to cause the...

CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...

PT-2018-22: Denial of Service in PRTG Network Monitor

The specialists of the Positive Research center have detected a Denial of Service vulnerability in PRTG Network Monitor. Vulnerability allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a specially crafted HTTP request. How to fix Update your software up to the...

Oracle Java SE Unauthorized Access Vulnerability

Oracle Java SE, Java SE Embedded, and JRockit are products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments; Java SE Embedded is a powerful, reliable, and portable...

CVE-2018-11382

The inststs function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

SUSE-SU-2018:1326-1 Security update for memcached

This update for memcached fixes the following issues: - CVE-2018-1000115: Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP support of the memcached server could result in denial of service via network flood traffic amplification of 1:50,000 ha...

SUSE-SU-2018:1226-1 Security update for the Linux Kernel (Live Patch 24 for SLE 12)

This update for the Linux Kernel 3.12.61-5283 fixes several issues. The following security issues were fixed: - CVE-2018-1000199: A bug in x86 debug register handling of ptrace could lead to memory corruption, possibly a denial of service or privilege escalation bsc1090036. - CVE-2017-0861:...

OPENSUSE-SU-2018:1265-1 Security update for opencv

This update for opencv fixes the following issues: - CVE-2016-1517: Fixed a denial of service segfault via vectors involving corrupt chunks boo1033150 - CVE-2016-1516: Fixed a double free issue that allows attackers to execute arbitrary code boo1033152...

Input validation

In 2345 Security Guard 3.7, the driver file 2345BdPcSafe.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x002220e0...

Input validation

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-10775

NULL pointer dereference in the fieldsadd function in fields.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service application crash, as demonstrated by end2xml...

TunnelBear for Windows Elevation of Privilege Vulnerability

TunnelBear for Windows is a Windows-based VPN software for anonymous access to restricted networks. A privilege extraction vulnerability in TunnelBear version 3.2.0.6 for Windows-based platforms stems from a NetNamedPipe endpoint created by the TunnelBearMaintenance service that allows arbitrary...

openSUSE: Security Advisory for zsh (openSUSE-SU-2018:1093-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-2796

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Concurrency. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with...