CVE-2018-21259

An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers to cause a denial of service application hang via a malformed link in a channel...

Design/Logic Flaw

An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers to cause a denial of service application hang via a malformed link in a channel...

CVE-2018-21259

Summary (CVE-2018-21259) : Mattermost Server prior to 4.10.1, 4.9.4, and 4.8.2 is affected. A malformed link in a channel can cause a denial of service (application hang). The connected documents confirm the affected versions and the impact but do not provide a published fix version or remediatio...

Denial of service in Apache Xerces2

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service infinite loop and application hang via malformed XML input, as...

Troubleshooting guide for Application and System Hang and Crash Scenarios

This troubleshooting document covers : Steps to troubleshoot application and system hang and crash scenarios. CPU/Memory spike Process and Complete Memory Dump Analysis This document is intended to outline troubleshooting techniques for above scenarios before collecting memory dumps.Please refer...

JasPer Denial of Service Vulnerability (CNVD-2019-00977)

JasPer is a Canadian software developer Michael Adams developed a JPEG-2000 codec / decoder open source implementation . A security vulnerability exists in JasPer version 2.0.14. A remote attacker could exploit this vulnerability to cause a denial of service application hang...

PT-2018-15451 · Jasper +1 · Jasper +1

Name of the Vulnerable Software and Affected Versions: JasPer version 2.0.14 Description: The issue allows remote attackers to cause a denial of service, resulting in an application hang, when attempting to convert to the jp2 format. Recommendations: For JasPer version 2.0.14, at the moment, ther...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible due to loops within the DecodeLabImage and EncodeLabImage functions. Using a tiff file, attackers can cause the application to hang, causing a DoS condition...

Important: GraphicsMagick

Issue Overview: Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of th...

Regular Expression Denial Of Service (ReDoS)

bassmaster is vulnerable to regular expression denial of service ReDoS attacks. These attacks are possible because the regex which is used for checking pipelines for valid urls can be given an extremely large string to make the application hang...

openSUSE Security Update : ImageMagick (openSUSE-2018-145)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file bsc1076051 - CVE-2017-18029: Prevent memory leak in...

Design/Logic Flaw

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

CVE-2018-5786

CVE-2018-5786 affects Long Range ZIP (lrzip). The flaw is in lrzip 0.631’s get_fileinfo routine, which can enter an infinite loop when processing a crafted lrz file, leading to denial of service via remote input. Public advisories confirm impact across lrzip deployments and list patched versions:...

PT-2018-17143 · Lrzip +2 · Long Range Zip +2

Name of the Vulnerable Software and Affected Versions: Long Range Zip aka lrzip version 0.631 Description: The issue is related to an infinite loop and application hang in the get fileinfo function. Remote attackers could leverage this to cause a denial of service via a crafted lrz file...

CVE-2018-5686

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

Code injection

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

CVE-2018-5686

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

CVE-2018-5685

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

CVE-2018-5686

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

Tor Denial of Service Vulnerability (CNVD-2017-38232)

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. Tor suffers from a denial of service vulnerability. An attacker can exploit this vulnerability to cause a denial of service application hang with specially crafted PEM...