CVE-2017-6198

The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to cause a denial of service by launching a fork bomb in the sandbox, or by using a large amount of disk space...

[SECURITY] Fedora 27 Update: glibc-2.26-24.fc27

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

The vulnerability of the Trend Micro OfficeScan antivirus protection, related to resource management errors, allows a perpetrator to execute the executable file fcgiOfcDDA.exe or cause damage to the INI files.

The vulnerability of the Trend Micro OfficeScan antivirus protection lies in resource management errors. Exploiting this vulnerability allows a malicious actor, who operates remotely and has access to the OfficeScan server, to execute the executable file fcgiOfcDDA.exe or cause damage to INI file...

[SECURITY] Fedora 26 Update: glibc-2.25-12.fc26

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 27 Update: glibc-2.26-15.fc27

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Trend Micro OfficeScan Unauthorized Remote Process Initiation Vulnerability

Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. An unauthorized remote process initiation vulnerability...

CVE-2017-14086

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with...

CVE-2017-14086

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with...

Authorization

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with...

Denial Of Service (DoS)

drupal/core is vulnerable to denial of service DoS attacks. Attackers can create a large number of image derivatives when the imageallowinsecurederivatives setting is enabled, consuming server disk space...

[SECURITY] Fedora 25 Update: glibc-2.24-10.fc25

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 26 Update: glibc-2.25-8.fc26

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 24 Update: glibc-2.23.1-12.fc24

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 25 Update: glibc-2.24-8.fc25

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

UBUNTU-CVE-2016-6173

NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...

Product update: Virtuozzo 7.0 Update 3

The new packages for Virtuozzo 7.0 introducing new features and bug fixes. Vulnerability id: PSBM-56838 Kernel panic when creating ploops on NVMe devices. Vulnerability id: PSBM-56668 HWIDs could not be obtained for SGI UV 1000 nodes. Vulnerability id: PSBM-56667 vzlicview could incorrectly detec...

php: out-of-bounds write in fpm_log.c

An out-of-bounds write flaw was found in the fpmlogwrite logging function of PHP's FastCGI Process Manager service. A remote attacker could repeatedly send maliciously crafted requests to force FPM to exhaust file system space, creating a denial of service and preventing further logging...

Cannot find anymore diff area candidates for volume

Challenge Backup or replication of a Windows OS fails. In the Windows event logs of the machine being backed up, there is an error with ID 8193 from source VSS: Volume Shadow Copy Service error: Unexpected error calling routine Cannot find anymore diff area candidates for volume...

CVE-2016-6437

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high consumption of disk space. The user would see a performance degradation. More Information:...

Design/Logic Flaw

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high consumption of disk space. The user would see a performance degradation. More Information:...