PT-2018-15391

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.1.1 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by crafting an input file. This is related to a stack-based buffer over-read in the parseOperand function...

radare2 'getToken' function denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'getToken' function in the libr/asm/p/asmx86nz.c file in radare2 versions prior to 3.1.0. An attacker can exploit this vulnerability to cause a denial of service stack buffer out-of-bound...

PT-2015-3386

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2e Description The Montgomery squaring implementation in crypto/bn/asm/x86 64-mont5.pl mishandles carry propagation and produces incorrect output, making it easier for remote attackers to obtain sensitive...

Design/Logic Flaw

The setdebugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service host crash by writing to the reserved bits of the DR7 debug control register...

PT-2012-4759

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.2 Citrix XenServer version 6.0.2 and earlier Description The issue allows local OS guest users to cause a denial of service by writing to the reserved bits of the DR7 debug control register. This is possible through...

CVE-2010-3086: Undefined Security Weakness

include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service panic via an invalid application that triggers a page fault...