The vulnerability of the ReadMATImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadMATImage function in the console-based image editing tool ImageMagick arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions by...

The vulnerability of the virtio_gpu_object_create function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the virtiogpuobjectcreate function in the Linux operating system is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a service failure memory consumption by triggering an initialization error...

The vulnerability of the CURLFile service implementation in the ext/curl/curl_file.c file of the PHP interpreter allows a attacker to cause a service failure or exert other effects.

The vulnerability of the CURLFile service implementation in the ext/curl/curlfile.c file of the PHP interpreter relates to the use of memory after it is freed. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures or other effects through special...

The vulnerability of the component implementation in ext/standard/var.c of the PHP interpreter allows a attacker to cause a service failure or exert other effects.

The vulnerability in the implementation of components in ext/standard/var.c of the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause a service failure the use of a resource after it is freed or have...

F5 Networks BIG-IP : TMM SSL/TLS profile vulnerability (K21154730)

Certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel TMM. The Session Ticket option is disabled by default. CVE-2017-6141 C Tenable Network Security, Inc. The...

The vulnerability of the `snd_msnd Interrupt` function in the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the sndmsnd Interrupt function in the Linux operating system’s kernel is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or have other adverse effects...

Commentary on US Election Security

Good commentaries from Ed Felten and Matt Blaze. Both make a point that I have also been saying: hacks can undermine the legitimacy of an election, even if there is no actual voter or vote manipulation. Felten: The second lesson is that we should be paying more attention to attacks that aim to...

GNU Libtasn1 '_asn1_check_identifier' Denial of Service Vulnerability

Libtasn1 is the ASN.1 library used by GnuTLS. A denial of service vulnerability exists in GNU Libtasn1 'asn1checkidentifier'. The vulnerability stems from the asn1checkidentifier function reading specially designed input, which can be exploited by an attacker to cause a remote denial of service...

CVE-2017-6030 Schneider Electric Modicon PLCs Predictable Value Range from Previous Values

A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...

CVE-2017-6030 Schneider Electric Modicon PLCs Predictable Value Range from Previous Values

A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...

The vulnerability of Cisco IOS XR routers, which allows a hacker to trigger a maintenance failure

The vulnerability of the Event Management Service router in Cisco IOS XR is related to resource management errors. Exploiting this vulnerability allows a malicious actor, operating remotely and without authentication, to cause service failures on the targeted device. The vulnerability stems from...

The vulnerability of the Safari browser, which allows a hacker to trigger a service failure or cause other effects.

The vulnerability of JavaScript’s kernel in the WebKit browser engine used by Safari is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory spill, application termination, or other effects, by using...

The vulnerability of the Android operating system’s Mediaserver service allows a hacker to cause the device to freeze, restart, or experience a service failure.

The vulnerability of the Android operating system’s Mediaserver service is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to become unresponsive or restart through a specially created file or a service...

OSRAM SYLVANIA Osram Lightify Home Network Command Replay Vulnerability

OSRAM SYLVANIA Osram Lightify Home is a set of open IoT platforms for automated control of lighting devices from OSRAM Germany. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Home versions 2016-07-26 and earlier. An attacker could use the vulnerability to capture and recover...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions or execute arbitrary code

The vulnerability of the TextInput component in the iOS operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure memory corruption, application termination with...

SAP NetWeaver Denial of Service Vulnerability (CNVD-2017-14356)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP NetWeaver, which can be exploited by an attacker to cause a deni...

Rockwell Automation PanelView Plus Security Bypass Vulnerability

Rockwell Automation PanelView Plus is a programmable graphical interface terminal from Rockwell Automation. A security vulnerability exists in the Rockwell Automation PanelView Plus 6 700-1500 that originates from the program failing to perform authentication checks. A remote attacker could explo...

The vulnerability in the JavaScript script of Internet Explorer and Microsoft Edge browsers allows attackers to induce a service failure.

The vulnerability of the JavaScript script in Internet Explorer and Microsoft Edge browsers arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office packages allows a perpetrator to cause service interruptions.

The vulnerabilities of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office arise from operations that occur outside of the buffer in memory. Exploitation of these vulnerabilities can allow a malicious...

Oracle Retail Invoice Matching Information Disclosure Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation, of which Oracle Retail Invoice Matching is a component with retail invoice amount matching functionality, and Security is a security subcomponent. An information disclosure vulnerability exists i...