5052 matches found
tcpdump: multiple overflow issues in protocol decoding
Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-24326)
Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in the X Plugin subcomponent of the MySQL Server component in Oracle MySQL, version 5.7.16 and earlier. A remote attacker could exploit this vulnerability to cause a denial of service...
Huawei Cell Phone Call Module Denial of Service Vulnerability
Huawei P10 and P10 Plus are smartphones from Huawei, a Chinese company. call module is one of the call modules. A denial of service vulnerability exists in the call module of the Huawei P10 and P10 Plus. An attacker can exploit this vulnerability by tricking a user into installing a malicious...
openSUSE Security Update : Wireshark (openSUSE-2017-840)
This update to Wireshark 2.2.8 fixes some minor vulnerabilities could be used to trigger dissector crashes, infinite loops, or cause excessive use of memory resources by making Wireshark read specially crafted packages from the network or a capture file : - CVE-2017-7702,CVE-2017-11410: WBMXL...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-17189)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of the MySQL Server component of Oracle MySQL. A remotely authorized attacker...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-17186)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Client programs subcomponent of the MySQL Server component of Oracle MySQL. A local attacker could exploi...
CVE-2017-7063
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. watchOS before 3.2.3 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service memory consumption and application crash...
CVE-2017-11407
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt...
CVE-2017-3644
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
Design/Logic Flaw
The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...
Fedora 26 : webkitgtk4 (2017-772bf90b03)
This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix several crashes a...
The vulnerability of the __wakeup modification in PHP interpreters allows a attacker to trigger a service failure or exert other effects.
The vulnerability of the wakeup modification in PHP interpreters relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service failures or other effects through specially crafted data, as demonstrated in the exception...
openSUSE Security Update : libcares2 (openSUSE-2017-810)
This update for libcares2 fixes the following issues : - CVE-2017-1000381: A NAPTR parser out of bounds access was fixed that could lead to crashes. bsc1044946 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
SA153: NSS Vulnerabilities Apr-May 2017
SUMMARY Symantec Network Protection products using affected versions of NSS are susceptible to two security vulnerabilities. A remote attacker can send empty SSLv2 messages and cause denial of service through application crashes. An attacker can also have unspecified impact by exploiting a...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2017-15713)
Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Server: InnoDB subcomponent of the MySQL Server component of Oracle MySQ...
Virtuozzo 7 : spice-server / spice-server-devel (VZLSA-2017-0254)
An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2017-15712)
Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Server: DDL subcomponent of the MySQL Server component in Oracle MySQL. ...
CVE-2017-7506
A vulnerability was discovered in spice server's protocol handling. An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses, leading to parts of server memory being leaked or a crash...
Google Chrome - Out-of-Bounds Access in RegExp Stubs
Google Chrome - Out-of-Bounds Access in RegExp Stubs There is an out-of-bounds access in RegExp.prototype.exec and RegExp.prototype.test. The code defined in BranchIfFastRegExp checks whether a regular expression object has the default map, however, it is possible to alter the map after this chec...
