UBUNTU-CVE-2018-19626

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination...

CVE-2018-19626

Wireshark vulnerability CVE-2018-19626 affects the DCOM dissector in Wireshark 2.6.0–2.6.4 and 2.4.0–2.4.10, where a crash could occur due to improper handling in the dissector. The issue was mitigated by modifying epan/dissectors/packet-dcom.c to add a null terminator, addressing the crash. Conn...

CVE-2018-5877

CVE-2018-5877 describes a vulnerability in the device programmer target-side code for firehose used on Qualcomm Snapdragon platforms. The issue arises because a string may not be properly NULL terminated, potentially leading to an incorrect buffer size in Snapdragon Automotive, Mobile, and Wear d...

Unspecified Vulnerability in libIEC61850

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'ControlObjectClientsetCommandTerminationHandler' function in the client/clientcontrol.c file in libIEC61850 v1.3. An attacker can exploit this vulnerability to obtain SEGV...

PT-2018-14805 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3 Description: A issue has been found in the software, which is a SEGV in ControlObjectClient setCommandTerminationHandler in client/client control.c. This issue is disputed by the software maintainer as it requires...

Apple Mac OS X Security Updates (HT209193)-01

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Null pointer dereference

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server aka Enterprise Server Administration web UI in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer...

CVE-2018-1783

IBM GPFS IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 command line utility allows an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. IBM X-Force ID: 148806...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale that could allow a unprivileged, auntheticated user to forcefully unterminate and deny access to data available through GPFS

Summary IBM Spectrum Scale could allow an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. Vulnerability Details CVEID: CVE-2018-1783 DESCRIPTION: IBM GPFS command line utility allows an unprivileged,...

EulerOS 2.0 SP3 : bind (EulerOS-SA-2018-1282)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A denial of service flaw was discovered in bind versions that include the 'deny-answer-aliases' feature. This flaw may allow a remote attacker to...

CVE-2018-14821

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software t...

Important: bind

Issue Overview: A denial of service flaw was discovered in bind versions that include the "deny-answer-aliases" feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition.CVE-2018-5740 Affected...

Important: bind

Issue Overview: A denial of service flaw was discovered in bind versions that include the "deny-answer-aliases" feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition.CVE-2018-5740 Affected...

CVE-2018-14638

A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in deletepasswdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service...

The vulnerability of the software license management function in Yokogawa ASTPLANNER, iDefine for ProSafe-RS, TriFellows, FCN/FCJ Simulator, and STARDOM VDS products allows a perpetrator to trigger the termination of the license management function or execute arbitrary code.

The vulnerability of the software for Yokogawa ASTPLANNER, iDefine for ProSafe-RS, TriFellows, FCN/FCJ Simulator, and STARDOM VDS products arises due to buffer overflow in memory. Exploiting this vulnerability allows a malicious actor to trigger the termination of the license management function ...

Wallarm Kubernetes Ingress Controller

Kubernetes is a popular technology which aims to improve how containers, microservices and other distributed components are managed across varied infrastructure. Since it was first announced by Google in 2014, it has grown in adoption and is now one of the leading system for automated deployment...

bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service

A denial of service flaw was discovered in bind versions that include the "deny-answer-aliases" feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition...

CVE-2018-1000654

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in asn1expandobjectidptree, after a long time, the program will be killed. This attack appears to be exploitable via...

IEC104 Client Utility

This module allows sending 104 commands. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IEC104 Client Utility', 'Description' = %q This module allows sending 104 commands. , 'Author' = 'Michae...

CVE-2017-3226

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption i.e., setting the configuration parameter CONFIGENVAES=y read environment variables from disk as the encrypte...