610 matches found
CVE-2017-6153: Uncontrolled Resource Consumption
Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a "Zip Bomb" attack...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-15636)
F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial-of-service vulnerability exists in F5 BIG-IP 11.x, 12.x, and 13.x. A remote attacker could exploit this vulnerability by sending specially crafted data to a target...
PT-2018-8300
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.0.0 through 13.1.0.3 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP versions 11.6.1 through 11.6.3.1 F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.2.1 Description The issue concerns a service...
Large GZip Denial Of Service (DoS)
superagent is vulnerable to large GZip denial of service DoS attacks aka ZIP bomb attacks. The attacks can be triggered when malicious HTTP servers send extremely large responses in a compressed form. Since the client does not limit the size of responses, it will end up consuming large amounts of...
Tor: Zip bomb
Vulnerability description not provided...
Large gzip Denial of Service
Overview Affected versions of superagent do not check the post-decompression size of ZIP compressed HTTP responses prior to decompressing. This results in the package being vulnerable to a ZIP bomb attack, where an extremely small ZIP file becomes many orders of magnitude larger when decompressed...
Decompression Bomb Testing
Decompression Bomb Testing A decompression bomb is a file designed to crash or render useless the program or system reading it, i.e. a denial of service. The files in this project can be used to test whether an application is vulnerable to this type of attack. A zip bomb, also known as a zip of...
prosody DoS
Resources exhaustion via zip bomb...
[SECURITY] [DSA 2895-1] prosody security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2895-1 [email protected] http://www.debian.org/security/ Luciano Bello April 06, 2014 http://www.debian.org/security/faq -...
