Design/Logic Flaw

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0004

CVE-2018-0004 affects Junos OS kernel: Kernel Denial of Service in the register/schedule interrupt handler triggered by a sustained sequence of normal transit traffic. Affects Junos OS releases listed in the entry (e.g., 12.1X46 prior to -D50; 12.3X48 prior to -D30; 12.3R before -R12-S7; 14.1 bef...

CVE-2018-0004 Junos OS: Kernel Denial of Service Vulnerability

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

Code injection

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

The CVE-2017-17901 entry applies to ZyXEL P-660HW v3 devices. Affected component is the router’s IP processing TTL handling, where a flood of IP packets with TTL=1 can cause CPU exhaustion, leading to a remote denial of service. The DoS impact is explicitly stated; no patch/version information or...

ZyXEL P-660HW TTL Expiry Denial Of Service

Exploit Title: ZyXEL TTL Expiry Denial of Service CVE: CVE-2017-17901 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://www.zyxel.com/ Version : v3 Tested on: ZyXEL P-660HW Category: Network Appliance Author Mail : [email protected] description: According to RFC 791, the...

openSUSE Security Update : file (openSUSE-2017-1298)

The GNU file utility was updated to version 5.22. Security issues fixed : - CVE-2014-9621: The ELF parser in file allowed remote attackers to cause a denial of service via a long string. bsc913650 - CVE-2014-9620: The ELF parser in file allowed remote attackers to cause a denial of service via a...

Code injection

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail...

CVE-2016-8610

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail...

Denial Of Service (DoS) In SSL Alert Handling

github.com/golang/go is vulnerable to denial of service DoS in SSL alert handling aka SSL-Death-Alert. The attacks are possible due to a flaw in the way that SSL3ALWARNING are handled, consuming 100% CPU on the server. This vulnerability is related to CVE-2016-8610...

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

CVE-2012-0881

CVE-2012-0881 : The Apache Xerces2 Java Parser vulnerability affects the Xerces2 Java Parser before 2.12.0. A crafted XML message to an XML service can cause a denial of service via CPU consumption due to hash table collisions. Affected products include Xerces2 Java, with IBM/Red Hat advisories c...

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

GHSA-6C8P-QPHV-668V Denial of service in ruby-openid

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

Denial of service in ruby-openid

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

crack does not properly restrict casts of string values

The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML type...

HTTParty does not restrict casts of string values

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...