Denial Of Service (DoS)

libaudiofile.so is vulnerable to denial of serviceDoS. The attack is possible because it does not prevent the user from passing a malicious audio file to the reset1 function in libaudiofile/modules/BlockCodec.cpp, causing a divide-by-zero error and crashing the application...

CVE-2018-3040

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

Denial Of Service (DoS)

undertow-core is vulnerable to denial of service DoS attacks. The application calls the JarURLConnection.getLastModified method causes file handle to remain open and leak file descriptors, causing that file to become unavailable for others...

Denial Of Service (DoS) Through Integer Overflow

libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass a bitmap file to the DecodeHeader function in io-bmp.c file to cause an integer overflow that can crash the application...

CVE-2018-0031

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

Code injection

In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service DoS attack on an Openshift 3.9, or 3.7 Cluster...

CVE-2018-12018

CVE-2018-12018 affects Go Ethereum (geth) LES GetBlockHeadersMsg handling prior to v1.8.11. An integer signedness error for the array index allows a crafted query with Skip = -1 to crash a remote node (EPoD). The vulnerability occurs when the server validates the requested headers after skipping ...

Denial Of Service (DoS)

libsndfile.so is vulnerable to denial of service DoS attacks. The vulnerability exists in psfmemset of src/common.c due to the lack of sanity check on the value used in the memset function, allowing a stack buffer overflow to occur, causing a DoS attack...

Security Bulletin: Rational Build Forge Security Advisory (CVE-2014-0098)

Summary Apache HTTP Server has a security vulnerability that can lead to a denial of service DOS attack. To avoid this issue in IBM Rational Build Forge, you should use the latest version Apache HTTP Server which contains the fix for this problem. Vulnerability Details | Subscribe to My...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security Network Protection

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 7 that is used by IBM Security Network Protection. These issues were disclosed as part of the IBM Java SDK updates in October 2015. Vulnerability Details CVEID: CVE-2015-4734 DESCRIPTION: An...

Security Bulletin: IBM QRadar SIEM is vulnerable to DOS attack via malicious packets. (CVE-2015-5044)

Summary QRadar Flow Collector DOS vulnerability while processing certain flows received from network Vulnerability Details CVE-ID: CVE-2015-5044 Description: IBM QRadar SIEM QFLOW component is susceptible to a DOS attack when an attacker sends certain packet types. CVSS Base Score: 4.3 CVSS...

Denial Of Service (DoS)

libcdio.so is vulnerable to denial of service DoS. The vulnerability exists in reallocsymlink in rock.c where a null pointer dereference occurs when an attacker sends a malicious file , causing a denial of service DoS attack...

CVE-2018-5141

A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service DOS attack or to display unwanted content from arbitrary URLs to users. This vulnerabili...

CVE-2017-5419

If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service DOS attack. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2017-5419

If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service DOS attack. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2018-5141

CVE-2018-5141 is a vulnerability in the Firefox Push API where notifications can be triggered by web content via service workers without direct user interaction, potentially allowing opening new tabs or displaying content from arbitrary URLs. The connected documents confirm this affects Firefox v...

Liberapay: Improper Data Validation / Unvalidated Input

Steps to reproduce: 1 - Be logged in a account 2 - Go to: https://liberapay.com/user/edit/statement 3 - Click on Visualize 4 - Submit and edit POST parameters to fuzz infinitely 5 - Wait the server proccess the request. I send only 2.813.054 characters. Improper input size validation... I'm sorry...

IOVLabs: DoS through PeerExplorer

Summary: The peer discovery implementation is vulnerable to a Denial of Service attack due to improper management of connections. Description: The two main files of interest in detailing this vulnerability are PeerExplorer.java and NodeChallengeManager.java. To explain the flow of execution I'll ...

CVE-2017-16129

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive...

CVE-2017-16129

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive...