Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass an .pcd file to the DecodeImage function in pcd.c, causing a memory leak that can crash the application or consume resources...

CVE-2018-3067

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Design/Logic Flaw

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-3063

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-3063

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-3022

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3064

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

Denial Of Service (DoS)

libhyphen.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a buffer overflow issue in hnjhyphenhyphword of hyphen.c, causing DoS attacks...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. The library does not restrict the maximum size of the image to be decoded, allowing a malicious user to pass a big image to the application to consume memory, crashing the application...

Denial Of Service (DoS)

memjs is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of sanitization of the value option which is passed to the Buffer constructor, allowing a DoS attack, as well as information disclosure through the exposure of uninitialized memory...

Denial Of Service (DoS)

libraw.so is vulnerable to denial of service DoS attacks.A malicious user can pass a RAW file to the quicktake100loadraw function in dcrawcommon.cpp to cause a buffer overflow, leading to an application to crash...

Security Bulletin: FileNet CMIS (FNCMIS) and Content Manager 8 CMIS (CM CMIS) does not verify the incoming Web Services request's message size

Summary Automatically sending number of very large size Web Services SOAP messages can cause DOS attacks. Vulnerability Details CVEID: Not Applicable DESCRIPTION: After an Apache OpenCMIS Client often custom code is successfully authenticated with the repository FN CMIS & CM CMIS and automaticall...

Denial Of Service (DoS)

node is vulnerable to denial of service DoS attacks. A malicious user can trigger a cleanup bug that causes objects in the native code to be used after they no longer available with a server providing the http2 service, leading to the application crashing...

Denial Of Service (DoS)

libpoppler.so is vulnerable to denial of service DoS attacks. A malicious user can pass a pdf file to the isImageInterpolationRequired function in Splash.cc to cause a floating point exception that can crash the application or overwrite memory...

openSUSE Security Update : mariadb (openSUSE-2018-572)

This update for mariadb to version 10.2.15 fixes the following issues : These security issues were fixed : - CVE-2018-2767: Enforse use of SSL/TLS in embedded server library Return of BACKRONYM bsc1088681. - CVE-2018-2786: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent:...

Denial Of Service (DoS)

libpoppler.so is vulnerable to denial of service DoS attacks. A malicious user can pass a pdf file to the AnnotPath::getCoordsLength function in Annot.cc to cause a null pointer dereference that can crash the application...

Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: Server: Partition. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful...

Amazon Linux AMI : mysql55 (ALAS-2018-1028)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure wher...

Amazon Linux AMI : mysql57 (ALAS-2018-1026)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...