Denial Of Service (DoS)

vorbis-tools is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the library, which allows an attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

PT-2023-6580 · Apache Friends · Xampp

Name of the Vulnerable Software and Affected Versions: XAMPP affected versions not specified Description: The issue is caused by a buffer overflow, allowing a remote attacker to potentially cause a denial of service. Recommendations: At the moment, there is no information about a newer version th...

CVE-2023-5568

A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service...

PT-2023-9225 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: LibTIFF versions prior to the fixed version Description: A heap-buffer-overflow vulnerability was found in LibTIFF, specifically in the extractImageSection function at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attacker...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2876)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0260 Updated ghostscript packages fix security vulnerability

Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. CVE-2023-36664 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devnpcxwriterle in ghostscript. This issue may allow a local attacker to cause a denial o...

Debian: Security Advisory (DLA-3560-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 / 7 : php55 (ELSA-2015-1053)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1053 advisory. - core: fix use-after-free vulnerability in the processnesteddata function unserialize CVE-2015-2787 - core: fix NUL byte injection in file name...

FreeRDP progressive_decompress function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the miscalculation of the nXSrc and nYSrc variables in the progressivedecompress function. An attacker could exploit this...

FreeRDP general_LumaToYUV444 function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the generalLumaToYUV444 function processing on the in variable without checking if it contains data of sufficient length. An...

PT-2023-25614 · Zoom · Zoom Client

Name of the Vulnerable Software and Affected Versions: Zoom Clients versions prior to 5.14.5 Description: The issue is related to a buffer overflow that may allow an unauthenticated user to cause a denial of service via network access. Recommendations: For versions prior to 5.14.5, update to...

CVE-2022-31810

A vulnerability has been identified in SiPass integrated All versions V2.90.3.8. Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated remote attacker to crash...

PT-2023-4826 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: libtiff version 4.5.0 Description: The issue is caused by a buffer overflow on the stack in the uv encode function of the LibTIFF library. This can occur when the library reads a corrupted little-endian TIFF file and specifies the output to b...

CVE-2023-36359

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-3195

A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service...

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimsggetpubpid in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2020-23257

Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/jsvar.c...

PT-2023-7044 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a buffer overflow in the seq buf putmem hex function of the Linux kernel. This could potentially allow an attacker to cause a denial of service. Recommendations...

CVE-2023-27063

Tenda V15V1.0 V15.11.0.14152131901058 was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2023-27064

Tenda V15V1.0 V15.11.0.14152131901058 was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...