571 matches found
open62541/fuzz_binary_message: Crash in copyAttributeIntoNode
Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6657398270853120 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
Medium: postgresql95, postgresql96
Issue Overview: Privilege escalation flaws were found in the initialization scripts of PostgreSQL. A remote attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.CVE-2017-12172 INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL...
Code injection
Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS...
CVE-2017-1000191
Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS...
CVE-2017-1000191: Uncontrolled Resource Consumption
Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS...
Integer Overflow
MuPDF is vulnerable to integer overflows. An attacker can pass a malicious pdf file to the pdfreadnewxrefsection function in pdf/pdf-xref.c, causing an integer overflow in the application that can lead to arbitrary writes and the application crashing...
IBM Lotus Notes Denial Of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "IBM Notes Denial Of Service", 'Description' = %q This module exploits a vulnerability in the native browser that comes with IBM Lotus Notes. If...
Microsoft Engineer Installs Google Chrome Mid-Presentation After Edge Kept Crashing
Ever since the launch of Windows 10, Microsoft has been heavily pushing its Edge browser, claiming it to be the best web browser over its competitors like Mozilla Firefox, Opera and Google Chrome in terms of speed and battery performance. However, Microsoft must admit that most users make use of...
Denial Of Service (DoS) Through Memory Leak
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a MAT file to the application to cause a memory leak, consuming system memory and leading to the application crashing...
Denial Of Service (DoS) Through Integer Overflow
expat is vulnerable to integer overflows. A malicious user can set XMLCONTEXTBYTES to be undefined to cause an integer overflow, crashing the application...
Hacker Charged for Crashing Businesses Using Millions of Mirai botnet
By Waqas Daniel ‘BestBuy’ Kaye Extradited to the UK Hacker Charged for This is a post from HackRead.com Read the original post: Hacker Charged for Crashing Businesses Using Millions of Mirai botnet...
Denial Of Service (DoS) Through Memory Consumption
apache-shiro is vulnerable to denial of service DoS attacks. The library does not catch unexpected errors in scheduled tasks, causing threads to run indefinitely without being terminated. This can lead to the application running out of memory and crashing...
ghostscript security update
CentOS Errata and Security Advisory CESA-2017:2180 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Denial Of Service (DoS) Through Use-After-Free
ImageMagick is vulnerable to denial of service DoS through use-after-free attacks. A malicious user can attempt to use memory that has been freed through the ReadWMFImage function in coders/wmf.c. This leads to the application crashing...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. The library does not check the DPX image file size during the initial upload. This allows a malicious user to pass a DPX image to the application to cause it to run out of memory, crashing it...
Denial Of Service (DoS)
Undertow is vulnerable to denial of service DoS attacks. The library does not close its streaming websocket properly, leading to an infinite loop. A malicious user can use this behavior to cause multiple infinite loops that lead to the system running out of resources and crashing...
Denial Of Service (DoS) Through Memory Leak
ImageMagick is vulnerable to denial of service DoS attacks through memory leaks. A malicious user can pass a pdb file to the application to cause a memory leak. This can lead to the system running out of memory and crashing...
CVE-2017-9047
A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlenbuf. If the content-type is...
