Code injection

When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process...

CVE-2018-5541

CVE-2018-5541 affects F5 BIG-IP ASM (BD process) where processing HTTP requests with an unusually large number of parameters can cause excessive CPU usage, leading to a DoS. Affected versions include BIG-IP ASM 13.0.0–13.1.0.1, 12.1.0–12.1.3.5, 11.6.0–11.6.3.1, and 11.5.1–11.5.6. Mitigation is to...

CVE-2018-5541

When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process...

Dovecot User Authentication Denial of Service Vulnerability

Dovecot is prone to a Denial of Service vulnerability within the user authentication. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Authentication flaw

Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through varexpand to perform %variable expansion. Sending specially crafted %variable fields could result in...

CVE-2017-2669

Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through varexpand to perform %variable expansion. Sending specially crafted %variable fields could result in...

CVE-2017-2669

Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through varexpand to perform %variable expansion. Sending specially crafted %variable fields could result in...

CVE-2017-2669

Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through varexpand to perform %variable expansion. Sending specially crafted %variable fields could result in...

WFICA32.exe Shows 100% CPU usage in Task Manager

WFICA32.exe on client shows 100% CPU usage in Task Manager...

superagent denial of service vulnerability

superagent is a small progressive HTTP client request library. A security vulnerability exists in superagent. An attacker could exploit this vulnerability to cause a denial of service large CPU or memory consumption...

Security Bulletin: Denial of Service with WebSphere Application Server affecting IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway (CVE-2014-0964)

Summary There is a potential denial of service with WebSphere Application Server versions 6.0.2 and 6.1. These affected versions of WebSphere Application Server are supported for use with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway. Vulnerabili...

Security Bulletin: IBM® DB2® XML Query Will Cause Excessive CPU Usage (CVE-2014-8901)

Summary IBM DB2 contains a security vulnerability which could allow a remote, authenticated user to exploit a vulnerability in DB2's XML library to cause a disruption of service. Vulnerability Details CVE ID: CVE-2014-8901 DESCRIPTION: IBM DB2 contains a disruption of service vulnerability. A...

uri-js denial of service vulnerability

uri-js is a JavaScript library for parsing and validating URLs. A security vulnerability exists in the regular expressions used in uri-js 2.1.1 and earlier versions. An attacker can exploit the vulnerability to cause the program to hang and cause CPU usage to reach 100%...

CVE-2017-16021

uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100%...

Code injection

uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100%...

PT-2018-6052 · Github · Uri.Js

Name of the Vulnerable Software and Affected Versions: uri-js versions 2.1.1 and earlier Description: The issue arises from a regular expression used by uri-js to validate URLs, which is vulnerable to redos. This vulnerability causes the program to hang and results in 100% CPU usage when attempti...

nodejs-tough-cookie: Regular expression denial of service

A regular expression denial of service flaw was found in Tough-Cookie. An attacker able to make an application using Touch-Cookie to parse a sufficiently large HTTP request Cookie header could cause the application to consume an excessive amount of CPU...

CVE-2018-0257

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

CVE-2018-0257

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

CVE-2018-0257

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...