Scientific Linux Security Update : httpd on SL3.x i386/x86_64

CVE-2009-1891 httpd: possible temporary DoS CPU consumption in moddeflate CVE-2009-2412 apr, apr-util: Integer overflows in memory pool apr and relocatable memory apr-util management Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way the Apache Portable...

Scientific Linux Security Update : avahi on SL5.x i386/x86_64

A flaw was found in the way the Avahi daemon avahi-daemon processed Multicast DNS mDNS packets with corrupted checksums. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to exit unexpectedly via specially crafted mDNS packets. CVE-2010-2244 A flaw was...

CentOS Update for python CESA-2012:0744 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SC DHCP 4.1.2 Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python ''' SC DHCP 4.1.2 4.2.4 and 4.1-ESV 4.1-ESV-R6 remote denial of serviceinfinite loop and CPU consumption/chew via zero'ed client name length http://www.k1p0d.com ''' import socket import getopt from sys import argv def main: args...

[ MDVSA-2012:115 ] dhcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:115 http://www.mandriva.com/security/ Package : dhcp Date : July 26, 2012 Affected: 2011. Problem Description: Multiple vulnerabilities has been discovered and corrected in ISC DHCP: An unexpected client...

CVE-2012-3571

ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed client identifier...

Design/Logic Flaw

ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed client identifier...

CVE-2012-3571

ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed client identifier...

CVE-2012-3571

ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed client identifier...

ISC DHCP 4.x - Multiple Denial of Service Vulnerabilities

ISC DHCP 4.x - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/54665/info ISC DHCP is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to cause the affected application to crash, resulting in a denial-of-service...

CVE-2012-4049

CVE-2012-4049 affects Wireshark’s NFS dissector. According to connected advisories, the vulnerability exists in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1, where a crafted NFS packet can trigger a denial of service via a loop and increased CPU usage. Remediation men...

CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

CVE-2011-3149

The vulnerability CVE-2011-3149 affects the pam_env module of Linux-PAM (pam) up to version before 1.1.5. The root cause is improper handling of environment variable expansion, which can overflow and allow a local attacker to cause a denial of service via CPU consumption. Affected component is pa...

CVE-2012-2738

The VteTerminal in gnome-terminal vte before 0.32.2 allows remote authenticated users to cause a denial of service long loop and CPU consumption via an escape sequence with a large repeat count value...

Code injection

The VteTerminal in gnome-terminal vte before 0.32.2 allows remote authenticated users to cause a denial of service long loop and CPU consumption via an escape sequence with a large repeat count value...

CVE-2012-2738

The VteTerminal in gnome-terminal vte before 0.32.2 allows remote authenticated users to cause a denial of service long loop and CPU consumption via an escape sequence with a large repeat count value...

CVE-2012-2738

The VteTerminal in gnome-terminal vte before 0.32.2 allows remote authenticated users to cause a denial of service long loop and CPU consumption via an escape sequence with a large repeat count value...

CVE-2012-2738

The VteTerminal in gnome-terminal vte before 0.32.2 allows remote authenticated users to cause a denial of service long loop and CPU consumption via an escape sequence with a large repeat count value...

Wireshark -- Multiple vulnerabilities

Wireshark reports: It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by...

Juniper Junos J-Web Hash Collision DoS (PSN-2012-07-650)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability in the J-Web component. It is possible to send requests to the web server that result in hash collisions, resulting in CPU consumption. C Tenable Network Security, Inc. include"compat.inc"...