2401 matches found
PT-2018-7172
Name of the Vulnerable Software and Affected Versions: Undertow versions prior to 1.3.28 Description: A denial-of-service issue was discovered in Undertow, where a non-clean TCP close causes the Websocket server to enter an infinite loop on every IO thread. Recommendations: For versions prior to...
PT-2017-2461 · Oracle +3 · Dbd::Mysql +3
Name of the Vulnerable Software and Affected Versions: DBD::mysql module versions through 4.043 Description: The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, by triggering certain error responses from a MySQL server or a loss of network...
June 27, 2017—KB4032693 (OS Build 10586.965)
None None...
DEBIAN-CVE-2017-9935
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...
Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net
Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
CompuLab Intense PC and MintBox 2 BIOS Privilege Vulnerability
The CompuLab Intense PC and MintBox 2 are both mini-PC devices from CompuLab Israel. the BIOS is a ROM on-chip application. A BIOS privilege vulnerability exists in CompuLab Intense PC and MintBox 2 using versions of BIOS prior to 2017-05-21, which stems from the program's failure to apply write...
Android ALSA PCM Playback Kernel Module Memory Misreference Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the ALSA PCM Playback Kernel Module is an audio playback kernel module. A security vulnerability exists in the 'msmpcmplaybackclose' function of the ALSA PCM Playback Kern...
BSA-2017-305
Security Advisory ID : BSA-2017-305 Component : Apache Tomcat Revision : 1.0: Interim The handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOWUPDATE before allowing the application to write more data...
PT-2017-18234
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue arises in the msm pcm playback close function where prtd is assigned substream-runtime-private data. After prtd is freed, it is not sanitized and set to NULL, resulting in a danglin...
PT-2017-18260
Name of the Vulnerable Software and Affected Versions FreeType 2 versions prior to 2017-03-26 Description The issue is caused by a heap-based buffer overflow related to the t1 builder close contour function in psaux/psobjs.c, resulting in an out-of-bounds write. Recommendations For versions prior...
DEBIAN-CVE-2017-2377
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service memory corruption and application crash by leveraging a window-close action...
CVE-2017-2377
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service memory corruption and application crash by leveraging a window-close action...
UBUNTU-CVE-2017-2377
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service memory corruption and application crash by leveraging a window-close action...
Android Dialog Denial of Service Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A denial of service vulnerability exists in the Android system dialog. The vulnerability is caused by the system-level Intent mechanism "android.intent.action.CLOSESYSTEMDIALOGS" in...