CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

GHSA-XJQG-9JVG-FGX2 Nokogiri subject to DoS via libxml2 vulnerability

The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 as used in nokogiri before 1.6.7.1 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data, a different vulnerability than...

CVE-2018-1517

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681...

CVE-2018-1000224

Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in DeSerialization functions core/io/marshalls.cpp that can result in DoS packet of...

cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service DoS attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack...

FreeBSD -- Resource exhaustion in IP fragment reassembly

Problem Description: A researcher has notified us of a DoS attack applicable to another operating system. While FreeBSD may not be vulnerable to that exact attack, we have identified several places where inadequate DoS protection could allow an attacker to consume system resources. It is not...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the krb5gssprocesscontexttoken function of lib/gssapi/krb5/processcontexttoken.c where a terminated security-context handle could be used by authenticated users to cause a Denial of Service DoS attack...

Updated libsndfile packages fix security vulnerabilities

Updated libsndfile package fixes security vulnerabilities: The function d2alawarray in alaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17456. The function d2ulawarray in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17457. A stack-based buffer...

Design/Logic Flaw

It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could...

Soroush IM Desktop App 0.17.0 - Authentication Bypass

Exploit Title: Soroush IM Desktop App 0.17.0 - Authentication Bypass Date: 2018-08-08 Exploit Author: VortexNeoX64 Vendor Homepage: https://soroush-app.ir Software Link: http://54.36.43.176/SoroushSetup0.17.0.exe Version: 0.17.0 BETA Tested on: Windows 10 1803 and windows server 2016 14393 Securi...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a TIFF image to the TIFFRGBAImageOK function in tifgetimage.c to cause an out-of-bounds read that can crash the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file to the LogL16Decode and LogLuvDecode32 function in tifluv.c to cause an out-of-bounds write that can crash the application...

CVE-2016-8626

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests...

CVE-2016-8626

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests...

CVE-2016-8626

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests...

ipPulse 1.92 Denial Of Service

Exploit Title : ipPulse 1.92 "Enter Key 'Name' - Denial of Service" POC Discovery by : Shubham Singh Known As : Spirited Wolf Twitter: @Pwsecspirit Email : [email protected] Youtube Channel : www.youtube.com/c/Pentestingwithspirit Discovery Date : 2018-07-30 Vendor Homepage :...

Denial Of Service (DoS) Through Divide-By-Zero

libtiff.so is vulnerable to a denial of service attack. A divide-by-zero occurs in the fpAcc function in the tiff2rgba tool tifpredict.c, which allows a remote attacker to cause a denial of service condition...

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service DoS. The attack can be triggered during an RPC connection where an attacker can trigger a use-after-free error through the virNetMessageFree function in rpc/virnetserverclient.c, causing the application to crashing or arbitrary code being executed...

Denial Of Service (DoS) Through Divide-By-Zero

libtiff.so is vulnerable to a denial of service attack. A divide-by-zero occurs in the the rgb2ycbcr tool in rgb2ycbcr.c when the parameter v or h is set to 0, which allows a remote attacker to cause a denial of service condition...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service attacks. The thumbnail command causes an illegal read to occur in the tagCompare function in tifdirinfo.c which results in a denial of service condition...