CVE-2016-8734: Uncontrolled Resource Consumption

Apache Subversion's moddontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory...

The vulnerability of the nsv_parse_NSVf_header function in the nsvdec.c component of the FFmpeg multimedia library allows a attacker to cause a waste of computational resources and a denial of service.

The vulnerability of the nsvparseNSVfheader function in the FFmpeg’s multimedia library libavformat/nsvdec.c is related to resource management errors. Exploiting this vulnerability allows a malicious actor to unnecessarily consume computing resources and cause service failures by using a speciall...

CVE-2017-13775: Undefined Security Weakness

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

openSUSE Security Update : wireshark (openSUSE-2017-674)

This update for wireshark fixes minor vulnerabilities that could be used to trigger dissector crashes, infinite loops, or cause excessive use of CPU resources by making Wireshark read specially crafted packages from the network or a capture file : - CVE-2017-9352: Bazaar dissector infinite loop...

PT-2017-10951

Name of the Vulnerable Software and Affected Versions OpenDaylight versions 3.3 through 4.0 Description The issue occurs when sending Port-Status packets to OpenDaylight, resulting in a DOMRpcImplementationNotAvailableException. This exception causes the controller to launch exceptions and consum...

CVE-2017-1000361: Undefined Security Weakness

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...

wireshark: X11 memory leak (wnpa-sec-2015-15)

A flaw was found in X11 dissector of wireshark of which an attacker could make wireshark consume excessive CPU resources which could make system unresponsive by injecting specially crafted packet onto the wire or by convincing wireshark user to read malformed packet trace file...

PowerDNS Recursor Label Decompression DoS Vulnerability (2015-01) - Windows

PowerDNS Recursor is prone to a denial of service DoS vulnerability. Note: This VT has been deprecated as the product is not supported on Windows. It is therefore no longer functional. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

Wireshark 1.12.x < 1.12.13 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.12.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.13 advisory. - The NDS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet on...

MGASA-2016-0157 Updated pgpdump packages fix security vulnerability

When pgpdump is run on specially crafted input, a denial of service condition occurs. The program runs with 100% CPU usage for an indefinite amount of time. A remote attacker is able to create a specially crafted input that is leading to CPU resource consumption resulting in denial of service...

PT-2016-3241

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.3 Description The issue is related to the auth password function in auth-passwd.c in sshd, which does not limit password lengths for password authentication. This allows remote attackers to cause a denial of service...

PT-2015-2441

Name of the Vulnerable Software and Affected Versions Junos versions prior to 12.1X44-D50 Junos versions prior to 12.1X46-D35 Junos versions prior to 12.1X47-D25 Junos versions prior to 12.3R10 Junos versions prior to 12.3X48-D10 Junos versions prior to 13.2R8 Junos versions prior to 13.2X51-D35...

PowerDNS Nameserver Label Decompression Denial of Service (CVE-2015-1868)

A denial of service vulnerability exists in PowerDNS. The vulnerability is due to a design weakness in PowerDNS label decompression code causing excessive looping. A remote attacker can exploit these vulnerabilities by sending a request to a vulnerable server to consume CPU resource...

PHP 'main/rfc1867.c' Remote Denial of Service Vulnerability

PHP is a general-purpose web programming language. A remote denial of service vulnerability exists in PHP 'main/rfc1867.c' that allows remote attackers to submit special requests consuming large amounts of CPU resources to conduct denial of service attacks...

wireshark-qt: denial of service

CVE-2015-3808 denial of service There is an infinite loop condition in dissectlbmrpser in epan/dissectors/packet-lbmr.c. It's possible for an attacker to set the the variable 'optionlen' to 0, causing the loop to never terminate. This issue is leading to excessive CPU resources consumption by...

PT-2015-6330

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.4 Description The issue is related to the WebSocket dissector in Wireshark, where a recursive algorithm is used. This allows remote attackers to cause a denial of service by consuming CPU resources via a...

Apple Mac OSX - Local Denial of Service

Apple Mac OSX - Local Denial of Service / 2015, Maxime Villard, CVE-2015-1100 Local DoS caused by a missing limit check in the fat loader of the Mac OS X Kernel. $ gcc -o Mac-OS-XFat-DoS Mac-OS-XFat-DoS.c $ ./Mac-OS-XFat-DoS BINARY-NAME Obtained from: http://m00nbsd.net/garbage/Mac-OS-XFat-DoS.c...

IBM WebSphere Portal 6.1.5.x < 6.1.5.3 CF27 Multiple Vulnerabilities

The version of IBM WebSphere Portal installed on the remote host is 6.1.5.x prior to 6.1.5.3 CF27. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the 'bootconfig.jsp' script due to improper validation of user-supplied input. An attacker c...

xerces security update

CentOS Errata and Security Advisory CESA-2014:1319 Updated xerces-j2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

Request Tracker (RT) 4.2.x - 4.2.2 DoS Vulnerability

Request Tracker RT is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...