3544 matches found
ntp: authentication doesn't protect symmetric associations against DoS attacks
A denial of service flaw was found in the way NTP hosts that were peering with each other authenticated themselves before updating their internal state variables. An attacker could send packets to one peer host, which could cascade to other peers, and stop the synchronization process among the...
arm: various unimplemented hypercalls log without rate limiting
ISSUE DESCRIPTION The HYPERVISORphysdevop hypercall and most suboperations of the HYPERVISORhvmop hypercall are not currently implemented by Xen on ARM and when called will log the use to the hypervisor console. However these guest accessible log messages are not rate-limited. IMPACT A malicious...
DLA-333-1 cakephp - security update
Bulletin has no description...
CVE-2015-7691
The cryptoxmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service crash via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750...
CakePHP 3.0.5 XML Class SSRF
============================================================================= Title : CakePHP Xml class SSRF Vulnerability CVE Number : N/A not assigned Affected Software : Confirmed on CakePHP v3.0.5 prior versions may also be affected Credit : Takeshi Terada of Mitsui Bussan Secure Directions,...
NetUSB Stack Buffer Overflow
!/usr/bin/env python -- coding: utf-8 -- import socket import sys import random import string import time import struct from Crypto.Cipher import AES pip install pycrypto DOSBYTES = 128 BoF TIMEOUT = 5 RECVSIZE = 16 PORTDEFAULT = 20005 AESKey =...
Cisco Telepresence Video Communication Server Expressway Call Policy Configuration Page DOS攻击
No description provided by source...
Oracle: Security Advisory (ELSA-2009-0474)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-0131)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 320-1] libemail-address-perl security update
Package : libemail-address-perl Version : 1.889-2+deb6u2 Pali Rohár discovered 1 a possible DoS attack in any software which uses the Email::Address Perl module for parsing string input to a list of email addresses. By default Email::Address module, version v1.907 and all before tries to understa...
DLA-320-1 libemail-address-perl - security update
Bulletin has no description...
SAP HANA hdbxsengine JSON - DoS
Application: SAP HANA Versions Affected: SAP HANA 1.00.095 Vendor URL: http://www.sap.com Bugs: DoS Reported: 28.09.2015 Vendor response: 29.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2241978 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: DoS Impact:...
Ruby on Rails: DoS Attack in Controller Lookup Code
Object leak vulnerability for wildcard controller routes in Action Pack There is an object leak vulnerability for wildcard controllers in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2015-7581. Versions Affected: = 4.0.0 and 5.0.0.beta1 Not affected: 4.0.0, 5.0.0.beta1...
Fedora 22 : nbd-3.11-1.fc22 (2015-12719)
Fix unsafe signal handlers to avoid DoS attack CVE-2015-0847. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment
To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...
DoS против библиотеки XMLTooling
Unhandled exception on processing XML with invalid schema...
OracleVM 3.3 : ntp (OVMSA-2015-0102)
The remote OracleVM system is missing necessary patches to address critical security updates : - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack CVE-2015-1799 - fix generation of MD5 keys with ntp-keyge...
Oracle Linux 6 : ntp (ELSA-2015-1459)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1459 advisory. - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack...
ntp security, bug fix, and enhancement update
4.2.6p5-5 - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack CVE-2015-1799 - fix generation of MD5 keys with ntp-keygen on big-endian systems CVE-2015-3405 - log when stepping clock for leap second or...