CVE-2018-10864

Summary: CVE-2018-10864 affects Red Hat’s redhat-certification. The issue is an uncontrolled resource consumption in document loading, where an attacker can supply an existing but invalid XML file that is opened and never closed, potentially causing a Denial of Service. Root cause: improper handl...

openSUSE Security Update : tiff (openSUSE-2018-443)

This update for tiff fixes the following issues : - CVE-2017-9935: There was a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:1180-1)

This update for tiff fixes the following issues : - CVE-2017-9935: There was a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an...

GHSA-882P-JQGM-F45G Uncontrolled resource consumption in nokogiri

The xzhead function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service memory consumption via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file...

The vulnerability of the Junos operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

Directory traversal

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated again...

CVE-2018-5784

CVE-2018-5784 — LibTIFF 4.0.9 contains a denial-of-service vulnerability in TIFFSetDirectory (tif_dir.c) due to unvalidated declared versus actual directory entries, enabling remote attackers to trigger resource exhaustion via a crafted TIFF file. The connected IBM bulletin corroborates the same ...

Circle with Disney Apid Photo Upload Denial of Service Vulnerability

Summary An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to...

Dnsmasq contains multiple vulnerabilities

Overview Dnsmasq versions 2.77 and earlier contains multiple vulnerabilities. Description Multiple vulnerabilities have been reported in dnsmasq.CWE-122: Heap-based Buffer Overflow - CVE-2017-14491 CWE-122: Heap-based Buffer Overflow - CVE-2017-14492 CWE-121: Stack-based Buffer Overflow -...

CVE-2017-12077

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager SRM before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...

Denial of service

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager SRM before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...

CVE-2017-12076

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation DSM before 6.1.1-15088 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...

CVE-2017-12077

CVE-2017-12077 affects Synology Router Manager (SRM) prior to 1.1.4-6509, specifically the SYNO.Core.PortForwarding.Rules component. The vulnerability allows a remote authenticated attacker to trigger uncontrolled resource consumption, exhausting memory resources and leading to denial of service....

CVE-2017-12076

CVE-2017-12076 affects Synology DiskStation Manager (DSM) prior to 6.1.1-15088, specifically SYNO.Core.PortForwarding.Rules. The vulnerability allows a remote authenticated attacker to cause uncontrolled resource consumption by exhausting memory, resulting in a denial of service. Affects DSM depl...

CVE-2017-12077

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager SRM before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...

PT-2017-12339 · Synology · Synology Disk Station

Name of the Vulnerable Software and Affected Versions: Synology DiskStation DSM versions prior to 6.1.1-15088 Description: The issue allows a remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack due to an Uncontrolled Resource Consumptio...

CVE-2017-9627

An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service...

Denial of service

An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service...

CVE-2017-9627

An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service...

CVE-2017-9627

The CVE-2017-9627 entry affects Schneider Electric Wonderware ArchestrA Logger, with vulnerable versions listed as 2017.426.2307.1 and earlier. The issue is Uncontrolled Resource Consumption (memory exhaustion) that can lead to denial of service. Connected documents corroborate the vulnerability ...