1885 matches found
Debian DLA-788-1 : pdns-recursor security update
Florian Heinz and Martin Kluge reported that pdns-recursor, a recursive DNS server, parses all records present in a query regardless of whether they are needed or even legitimate, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the pdns server, resulting in a...
Debian DSA-3763-1 : pdns-recursor - security update
Florian Heinz and Martin Kluge reported that pdns-recursor, a recursive DNS server, parses all records present in a query regardless of whether they are needed or even legitimate, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the pdns server, resulting in a...
OpenSSL Death Alert Denial of Service Vulnerability - Linux
OpenSSL is prone to a Denial of Service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
[SECURITY] [DSA 3763-1] pdns-recursor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3763-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...
Design/Logic Flaw
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority informati...
CVE-2016-6580
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority informati...
CVE-2016-6580
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority informati...
CVE-2016-6580
CVE-2016-6580 affects HTTP/2 implementations built with the Python priority library older than 1.2.0. The vulnerability arises when a peer can assign priority information for every HTTP/2 stream ID, allowing the priority data structure to grow without bound, consuming memory and driving extremely...
CVE-2016-6580
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority informati...
Update Rollup 9 for System Center 2012 R2 Virtual Machine Manager
Update Rollup 9 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are three updates available for System Center 2012 R2 Virtual Machine Manager: one...
StreamProcess.exe is consuming high CPU spike on PVS Servers.
The Streamprocess.exe was consuming high CPU on the PVS servers. The Perfmon suggested sustained spike in Kernel mode and process dumps revealed that we were waiting for the Packet Send & Receive...
OpenSSL Death Alert Denial of Service Vulnerability - Windows
OpenSSL is prone to a Denial of Service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
expat: hash table collisions CPU usage DoS
A denial of service flaw was found in the implementation of hash arrays in Expat. An attacker could use this flaw to make an application using Expat consume an excessive amount of CPU time by providing a specially crafted XML file that triggers multiple hash function collisions. To mitigate this...
powerdns -- multiple vulnerabilities
PowerDNS reports: 2016-02: Crafted queries can cause abnormal CPU usage 2016-03: Denial of service via the web server 2016-04: Insufficient validation of TSIG signatures 2016-05: Crafted zone record can cause a denial of service...
iPhone playing the video automatically shut down“wonderful”vulnerability cause analysis-vulnerability warning-the black bar safety net
A description of the No. 23 in the morning major Network Media issued a newsiOS also exposed new vulnerabilities, play a particular video led to the automatic shutdown with the demo video））, the main contents are: Apple iOS devices and is a burst of new vulnerabilities that play a particular MP4...
Remote Utilities Host 6.3 - Denial of Service
Exploit Title: Remote Utilities - Host 6.3 - Denial of Service Date: 2016-11-25 Exploit Author: Peter Baris Vendor Homepage: www.remoteutilities.com Software Link: http://saptech-erp.com.au/resources/executables/host6.3.zip Version: 6.3.0.6 - other version are also affected below version 6.5 beta...
DLA-683-1 graphicsmagick - security update
Bulletin has no description...
Remote Anonymous Denial of Service Vulnerability in OpenSSL (SSL Death Alert)
OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. OpenSSL is vulnerable to a remote anonymous denial of service vulnerability in that OpenSSL's implementation of the SSL/TLS protocol handshake allows a client to repeatedly send packets...
Ovs-vswitchd daemon showing high CPU usage
XenServer 6.5 SP1 heavy IO traffic/ CPU utilization with open vswitch technology. Ovs-vswitchd daemon running on the XS was showing high CPU usage and performance tab shows heavy CPU usage...