CVE-2020-22037

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodecalloccontext3 at options.c...

CVE-2020-22039

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inaviaddientry function...

CVE-2020-22043

CVE-2020-22043 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in libavutil/fifo.c (fifo_alloc_common). Connected advisories confirm the issue affects FFmpeg 4.2 and have been fixed in OpenSUSE/SUSE advisories (SUSE-SU-2021:2322-1) and Ubuntu USN-6430-1, indicating a pa...

DEBIAN-CVE-2020-22021

Buffer Overflow vulnerability in FFmpeg 4.2 at filteredges function in libavfilter/vfyadif.c, which could let a remote malicious user cause a Denial of Service...

Denial Of Service (DoS)

ktbs.dev/teler/pkg/errors is vulnerable to denial of service. The vulnerability exists when running teler inside a Docker container and when encounter errors.Exit function, it is unable to get process ID and process group ID of teler to properly kill the error process...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a race conditions during an update of the local and shared status which allows an attacker to crash the application via malicious input...

Juniper Junos OS DoS (JSA11131)

The version of Junos OS installed on the remote host is affected by a denial of service DoS vulnerability as referenced in the JSA11131 advisory. The vulnerability exists in the Routing Protocol Daemon RPD service due to an improper check for unusual or exceptional conditions. An authenticated,...

CVE-2020-20264

Mikrotik RouterOs before 6.47 stable tree in the /ram/pckg/advanced-tools/nova/bin/netwatch process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error...

CVE-2021-22904

A flaw was found in RubyGem Actionpack which is framework for handling and responding to web requests in Rails. A possible DoS vulnerability was found in the Token Authentication logic in Action Controller...

CVE-2020-20220

CVE-2020-20220 affects MikroTik RouterOS prior to stable 6.47. The vulnerability is a memory corruption in the /nova/bin/bfd process that an authenticated remote attacker can exploit to trigger a Denial of Service via a NULL pointer dereference. Several connected sources corroborate the same desc...

RLSA-2021:1983 Important: idm:DL1 security update

Rocky Enterprise Software Foundation Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: slapi-nis: NULL dereference DoS with specially crafted Binding DN CVE-2021-34...

Denial of Service (DoS)

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Denial of Service DoS. Vulnerable version of libxml2 was used. The fix to this updates the vendored libxml2 from v2.9.10 to v2.9.12 which addresses: - CVE-2019-20388 -...

Denial Of Service(DoS)

tensorflow is vulnerable to denial of service. A division by zero occurs in tf.rawops.QuantizedBiasAdd, allowing an attacker to crash the application or potentially cause unexpected behavior...

CVE-2021-29041

Denial-of-service DoS vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by 1 enabling Time-based One-time password TOTP on behalf of the other user or 2 modifying the other...

Code injection

Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin...

CVE-2021-29533

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK failure by passing an empty image to tf.rawops.DrawBoundingBoxes. This is because the...

CVE-2021-32613

In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS...

CVE-2020-12526 BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of...

Design/Logic Flaw

evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use evmcore::Memory::copylarge, the evm crate can over-allocate memory when it is not needed, making it possible for an attacker to perform...

Debian DLA-2655-1 : rails security update

CVE-2021-22885 There is a possible information disclosure/unintended method execution vulnerability in Action Pack when using the redirectto or polymorphicurl helper with untrusted user input. CVE-2021-22904 There is a possible DoS vulnerability in the Token Authentication logic in Action...