CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

UBUNTU-CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

CVE-2012-0880 affects Apache Xerces-C++, allowing a remote attacker to cause a denial of service (CPU consumption) by sending a crafted XML message that triggers hash table collisions. Based on connected documents, impact is high (CVSS v3 base 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). remediatio...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880: Undefined Security Weakness

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

PT-2017-3707 · Schneider Electric · Modicon M340 +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers affected versions not specified Description: The issue concerns a vulnerable hash algorithm used for password encryption in the communication...

Denial Of Service (DoS)

bitcoin-ruby is vulnerable to denial of service DoS attacks. There is a flaw in the Merkle hash implementation that Bitcoin uses to calculate the Merkle root in a block header. Block hash collisions can easily be made by duplicating transactions in the Merkle tree. A record collision would preven...

expat: hash table collisions CPU usage DoS

A denial of service flaw was found in the implementation of hash arrays in Expat. An attacker could use this flaw to make an application using Expat consume an excessive amount of CPU time by providing a specially crafted XML file that triggers multiple hash function collisions. To mitigate this...

Denial Of Service (DoS)

Apache Geronimo is vulnerable to denial of service attacks through resource consumption. This is caused because it computes hash values for form parameters without reliably predicting hash collisions. This allows attackers to cause denial of service attacks by sending multiple parameters designed...

MySQL 5.7.x < 5.7.16 Multiple Vulnerabilities (October 2016 CPU) (SWEET32)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.16. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c, and t1lib.c due to improper use of pointer arithmetic for heap-buffer boundary checks. An...

Bypassing ASLR in 60 Milliseconds

Address Space Layout Randomization was a champion hardening technology introduced in most major desktop and mobile operating systems as a mitigation against memory-based code-execution attacks. Bypassing ASLR, however, has become somewhat of a parlor game for attackers and white-hat researchers,...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the accessibility of protected information.

A vulnerability that can lead to service failure exists in the Microsoft.NET Framework and is related to the processing of specially crafted requests that trigger hash collisions. Exploiting this vulnerability allows an attacker to send a small number of specially crafted requests to the.NET...

SUSE SLED11 / SLES11 Security Update : mono-core (SUSE-SU-2016:0257-1)

mono-core was updated to fix the following vulnerabilities : - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service throu...

expat: hash table collisions CPU usage DoS

A denial of service flaw was found in the implementation of hash arrays in Expat. An attacker could use this flaw to make an application using Expat consume an excessive amount of CPU time by providing a specially crafted XML file that triggers multiple hash function collisions. To mitigate this...

SUSE-SU-2016:0176-1 Security update for rsync

This update for rsync fixes two security issues: - CVE-2014-8242: Checksum collisions leading to a denial of service bsc900914 - CVE-2014-9512: Malicious servers could send files outside of the transferred directory bsc915410...

SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2016:0173-1)

This update for rsync fixes two security issues and two non-security bugs. The following vulnerabilities were fixed : - CVE-2014-8242: Checksum collisions leading to a denial of service bsc900914 - CVE-2014-9512: Malicious servers could send files outside of the transferred directory bsc915410 Th...

SLOTH Collisions Attacks Against SHA-1, MD5 in TLS, IKE, SSH

If you’re hanging on to the theory that collision attacks against SHA-1 and MD5 aren’t yet practical, two researchers from INRIA, the French Institute for Research in Computer Science and Automation, have demonstrated new attacks that raise the urgency to move away from these broken cryptographic...

MGASA-2015-0409 Updated rsync packages fix security vulnerability

Michael Samuel discovered that rsync was vulnerable to checksum collisions. This could prevent rsync from running and syncing files successfully, which could break various applications that use and rely on rsync rhbz1197601. The patched rsync will now operate in a way that is not vulnerable to th...