curl: LDAP NULL pointer dereference

A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldapgetattributeber function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply...

usersctp - Out-of-Bounds Reads in sctp_load_addresses_from_init

''' usersctp is SCTP library used by a variety of software including WebRTC. There is a vulnerability in the sctploadaddressesfrominit function of usersctp that can lead to a number of out-of-bound reads. The input to sctploadaddressesfrominit is verified by calling...

UBUNTU-CVE-2020-2574

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

OpenSSH < 4.5 Multiple Vulnerabilities

Binary data 701165.prm...

GOG Galaxy Denial of Service Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. A denial of service vulnerability exists in GOG Galaxy that originates from a networked system or product that does not properly authenticate incoming data. An attacker could exploit the vulnerability to...

PT-2018-16029 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.60 and prior Oracle MySQL versions 5.6.40 and prior Oracle MySQL versions 5.7.22 and prior Oracle MySQL versions 8.0.11 and prior Description: The issue allows a high privileged attacker with network access via...

ISC DHCP Buffer Overflow Vulnerability

ISC DHCP is an open source software implementation of the Dynamic Host Configuration Protocol used to connect to IP networks. A buffer overflow vulnerability exists in ISC DHCP. An attacker could trigger a buffer overflow in the DHCP option processing by returning a specially crafted response fro...

Tor Denial of Service Vulnerability (CNVD-2018-00232)

Tor is free software that enables anonymous communication. A denial of service vulnerability exists in Tor before 0.2.8.12. An attacker can exploit this vulnerability to cause a denial of service client crash via specially crafted hidden service descriptors...

CVE-2016-1254

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service client crash via a crafted hidden service descriptor...

IBM Notes Denial of Service Vulnerability (CNVD-2017-25669)

IBM Notes is a set of collaborative office software from IBM in the United States. The software has e-mail, calendar, scheduling and other office functions. A denial of service vulnerability exists in IBM Notes. An attacker can exploit this vulnerability to cause a denial of service client hangs...

TeamSpeak Server Buffer Overflow Vulnerability

TeamSpeak Serve is a voice over IP communication system server designed specifically for online gamers. A buffer overflow vulnerability exists in TeamSpeak Server version 3.0.13.6 08/11/2016 09:48:33. An attacker can exploit this vulnerability to cause a denial of service WINDOWS client crash...

CVE-2017-3730

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...

CVE-2017-3730

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...

CVE-2017-3730 Bad (EC)DHE parameters cause a client crash

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...

SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2017:1094-1)

This update for tigervnc provides the several fixes. These security issues were fixed : - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server bsc1031886 - CVE-2017-7395: Authenticated VNC client can crash VNC server bsc1031877 - CVE-2017-7394: Client can crash or block VNC server...

SUSE-SU-2017:1093-1 Security update for tigervnc

This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server bsc1031886 - CVE-2017-7395: Authenticated VNC client can crash VNC server bsc1031877 - CVE-2017-7394: Client can crash or block VNC server...

DEBIAN-CVE-2017-7395

In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...

tigervnc: Buffer overflow in ModifiablePixelBuffer::fillRect

A buffer overflow flaw, leading to memory corruption, was found in TigerVNC viewer. A remote malicious VNC server could use this flaw to crash the client vncviewer process resulting in denial of service...

OpenSSL Null Pointer Indirect Reference Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. OpenSSL suffers from a denial of service vulnerability. A denial of service results due to a malicious server that provides malformed parameters to the DHE or ECDHE key exchange, allowi...

CVE-2017-3730

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack...