Denial Of Service (DoS)

BlueZ is vulnerable to denial of service. The vulnerability exists because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c which allows an attacker to cause an application crash...

Denial Of Service (DoS)

.NET Core is vulnerable to denial of service. The vulnerability exists due to a stack overflow which allows an attacker to send a customized payload that is parsed during model binding and cause an application crash...

Regular Expression Denial Of Service (ReDoS)

steal is vulnerable to prototype pollution. The vulnerability is possible because of the use of insecure regular expression for input in main.js, causing an application crash...

SUSE-SU-2022:3286-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2022-2850: Fixed an application crash when running a syncrepl client that could be triggered via a malformed cookie bsc1202470. Non-security fixes: - Update to version 2.0.16git20.219f047ae: Fix missing 'not' in description CI - makes...

Oracle Linux 8 : mariadb:10.3 (ELSA-2022-6443)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6443 advisory. galera 25.3.35-1 - Rebase to 25.3.35 mariadb 3:10.3.35-1 - Rebase to 10.3.35 3:10.3.34-1 - Rebase to 10.3.34 Tenable has extracted the preceding...

Denial Of Services (DoS)

typo3/cms is vulnerable to denial-of-service. The vulnerability exists in handlePageError function in PageContentErrorHandler.php due to lack of page error handling which allows a remote attacker to cause an application crash...

mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements

MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...

mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

Denial Of Service (DoS)

libconfuse.so is vulnerable to denial of service. An attacker can send a malicious username parameter to the function cfgtildeexpand to cause a heap-based buffer over-read, leading to an application crash...

Denial Of Services (DoS)

graphql-java is vulnerable to denial-of-service. The vulnerability exists because ANTLR lexing and parsing code is taking proportionally longer to get to the max token state which allows a remote attacker to send a malicious GraphQL query that consumes CPU resources resulting in an application...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service.The vulnerability exists due to the buffer over read in GFErr xtraboxread function in boxcodebase.c, which allows an attacker to crash the application by providing a malicious input...

Denial Of Service (DoS)

kernal is vulnerable to denial of service.The vulnerability exists due to memory leak and application crash in pfkeyregister function in afkey.c, which allows an attacker to crash the application by providing a malicious input...

CVE-2015-4041: Denial of service (heap-based buffer overflow and application crash) in GNU Coreutils

Security Advisory ID : BSA-2022-1407 Component : GNU Coreutils Revision : 1.0 The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers ...

CVE-2022-31222

Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash...

Security Bulletin: A vulneraqbility in Zlib affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2018-25032)

Summary A vulneraqbility in Zlib affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent and IBM Tivoli Composite Application Manager for Transactions Web Response Time agent. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of...

Regular Expression Denial Of Service (ReDoS)

Mako is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the match attribute in the matchtagstart function of lexer.py, allowing an attacker to crash the application by providing a large number of tag quotes within its quoted...

Denial Of Service (DoS)

github.com/golang/net is vulnerable to Denial Of Service DoS. The vulnerability exists in goAway function in server.go because the server errors are not properly handled which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libassimp.so is vulnerable to denial of service. The vulnerability exists due to a segmentation fault in the XFileImporter.cpp, allowing an attacker to cause an application crash through a malicious input...

Regular Expression Denial Of Service (ReDoS)

shescape is vulnerable to regular expression denial of service. The vulnerability exists in escapeArgBash function in unix.js due to insufficient regular expression complexity in bash escaping which allows an attacker to cause polynomial backtracking or quadratic runtime resulting an application...

SUSE-SU-2022:3029-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2022-2850: Fixed an application crash when running a syncrepl client that could be triggered via a malformed cookie bsc1202470. Non-security fixes: - Update to version 1.4.4.19git46.c900a28c8: CI - makes...