1322 matches found
CVE-2016-4421
epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...
CVE-2016-3672
The archpickmmaplayout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDRNORANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid...
CVE-2016-3672
The archpickmmaplayout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDRNORANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid...
CVE-2016-3075
Stack-based buffer overflow in the nssdns implementation of the getnetbyname function in GNU C Library aka glibc before 2.24 allows context-dependent attackers to cause a denial of service stack consumption and application crash via a long name...
PT-2016-5950
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.9 Wireshark versions 2.x through 2.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in deep recursion, stack consumption, and application crash. This is achieved b...
PT-2016-3813
Name of the Vulnerable Software and Affected Versions librsvg versions prior to 2.40.12 Description The issue allows context-dependent attackers to cause a denial of service, resulting in an infinite loop, stack consumption, and application crash. This can be achieved via cyclic references in an...
CVE-2008-4482
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...
CVE-2009-0605
Stack consumption vulnerability in the dopagefault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.5 allows local users to cause a denial of service memory corruption or possibly gain privileges via unspecified vectors that trigger page faults on a machine that has a registered...
CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
Code injection
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
CVE-2015-6806
CVE-2015-6806 affects GNU Screen 4.3.1 and earlier; root cause is MScrollV recursion not properly limited in ansi.c, enabling denial of service via a large repeat-count escape sequence (stack consumption). Public advisories across distros (Ubuntu USN-3996-1, openSUSE/openSUSE-2019-1485, SUSE-SU-2...
CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
CVE-2015-6806: Improper Restriction of Operations within the Bounds of a Memory Buffer
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
PT-2015-7362
Name of the Vulnerable Software and Affected Versions GNU screen version 4.3.1 and earlier Description The issue is related to the MScrollV function in ansi.c, which does not properly limit recursion. This allows remote attackers to cause a denial of service, specifically stack consumption, via a...
Stack overflow
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
CVE-2015-2779: Undefined Security Weakness
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
Oracle Solaris Third-Party Patch Update : perl (cve_2014_4330_buffer_errors)
The remote Solaris system is missing necessary patches to address security updates : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many...