54 matches found
PT-2022-9730 · Amd +1 · Amd Secure Processor +1
Name of the Vulnerable Software and Affected Versions: AMD Secure Processor affected versions not specified Description: The issue is related to a failure to validate the integer operand in the ASP bootloader, which may allow an attacker to introduce an integer overflow in the L2 directory table ...
PT-2022-1777 · Cmark-Gfm +4 · Cmark-Gfm +4
Name of the Vulnerable Software and Affected Versions: cmark-gfm versions prior to 0.29.0.gfm.3 and 0.28.3.gfm.21 Description: The issue is related to an integer overflow in cmark-gfm's table row parsing, which may lead to heap memory corruption when parsing tables with more than UINT16 MAX...
CVE-2018-1078
It was found that all flows, including active and inactive, in the config datastore are installed back in the switch upon reconnection, as part of the node reconciliation process in OpenDayLight. This may lead to denial of service via table overflow or possibly circumventing of the controller's...
OracleVM 3.4 : dhcp (OVMSA-2018-0023)
The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...
kernel: Overflowing kernel mount table using shared bind mount
It was found that in Linux kernel the mount table expands by a power-of-two with each bind mount command. If a system is configured to allow non-privileged user to do bind mounts, or allows to do so in a container or unprivileged mount namespace, then non-privileged user is able to cause a local...
kernel: Overflowing kernel mount table using shared bind mount
It was found that in Linux kernel the mount table expands by a power-of-two with each bind mount command. If a system is configured to allow non-privileged user to do bind mounts, or allows to do so in a container or unprivileged mount namespace, then non-privileged user is able to cause a local...
MikroTik Router - ARP Table OverFlow Denial Of Service
MikroTik Router - ARP Table OverFlow Denial Of Service / Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Affected Series: Hap Lite Version: 6.25 Tested on: Parrot Security OS Date: 04-3-2017...
MikroTik Router - ARP Table OverFlow Denial Of Service
/ Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Affected Series: Hap Lite Version: 6.25 Tested on: Parrot Security OS Date: 04-3-2017 Category: Network Appliance Vulnerable Part: TCP Stack...
MikroTik Router Denial Of Service | ARP Table OverFlow Exploit
Exploit for hardware platform in category dos / poc CVE:2017-6444 Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Series : Hap Lite Tested on: Parrot Security OS Date: 03-3-2017 Category: Netwo...
postgresql: Integer overflow in hash table size calculation
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service daemon crash via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations...
Linux Kernel /proc/net/rt_cache远程拒绝服务漏洞
BUGTRAQ ID: 34084 CVECAN ID: CVE-2009-0778 Linux Kernel是开放源码操作系统Linux所使用的内核。 即使缓存的路由表保持不变,/proc/slabinfo中的ipdstcache值也会一直递增,这会导致ipdstcache最终会到达 /proc/sys/net/ipv4/route/maxsize的值。当到达该值的时候,内核就会报告“dst cache overflow”,之后服务器不再响应任何网络活动。 Linux kernel 2.6.x 临时解决方法: 删除REJECT路由,或用ip route add 10.10.0.0/16...
CVE-2007-3360: Undefined Security Weakness
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...
CVE-2004-2406
CVE-2004-2406 – summary: The vulnerability concerns an overflow in the phpgw_config table within phpGroupWare, reported for versions before 0.9.14.002. The connected records confirm the component (phpGroupWare) and the affected version boundary (prior to 0.9.14.002), but neither the exact root ca...
CVE-2002-0782
Novell BorderManager 3.5 with PAT Port-Address Translate enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface...