SuSE 11.2 Security Update : Xen (SAT Patch Number 7018)

XEN was updated to fix various bugs and security issues : The following security issues have been fixed : - xen: Domain builder Out-of-memory due to malicious kernel/ramdisk XSA 25. CVE-2012-4544 - XEN / qemu: guest administrator can access qemu monitor console XSA-19. CVE-2012-4411 - xen: Timer...

SuSE 11.1 Security Update : dhcp (SAT Patch Number 6671)

This update of dhcp fixes two security vulnerabilities : - Malformed client identifiers could cause a Denial of Service excessive CPU consumption, effectively causing further client requests to not be processed anymore. CVE-2012-3571 - Two unspecified memory leaks. CVE-2012-3954 Additionally, the...

KLA10189 DoS vulnerability in HP PKI

An unspecified vulnerability was found in the HP PKI. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely using a process name. Original advisories - Related products HP-PKI-ActiveX-Control-HPPKI.ocx/ CVE list CVE-2012-6501...

Microsoft .NET Framework Open Data Protocol DOS Vulnerability (2769327)

This host is missing an important security update according to Microsoft Bulletin MS13-004. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DoS vulnerability in Flash player (access violation)

Hello 3APA3A! I want to warn you about Denial of Service vulnerability in Flash player plugin for browsers. I've found this vulnerability in June 11.06.2011. That time I've wrote about this built-in DoS in new version of Flash player as a "surprise" from Adobe for owners of old browser, because i...

DoS vulnerability in Siemens S7-1200 PLCs

Hi all, I have found a DoS vulnerability in the Siemens S7-1200 PLCs. It is present in firmware versions 2 and 3. After an exchange of specially crafted packets to TCP port 102 the PLC shuts down. The red, green and yellow status LEDs start flashing. All outputs are shut off. The device stops...

KLA10084 DoS vulnerability in Siemens ALM

A memory leak was found in Siemens ALM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed packets. Original advisories Siemens bulletin Related products Automation-License-Manager CVE list CVE-2012-469...

CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)

A denial of service vulnerability has been reported in the CA ARCserve Backup authentication service...

[slackware-security] ruby

New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/ruby-1.9.3p327-i486-1slack14.0.txz: Upgraded. This release fixes a hash-flooding DoS vulnerability and many other bugs. Fo...

XEN: security and bugfix update (important)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

CVE-2012-4538

The HVMOPpagetabledying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service hypervisor crash via unspecified vectors...

TrouSerS Denial Of Service Vulnerability

Exploit for linux platform in category dos / poc crashtcsd.py Copyright c 2012 Andy Lutomirski. All rights reserved. Permission is granted to anyone to copy and redistribute this file verbatim. Permission is not granted to distribute modified copies or derivative works. import struct import socke...

CVE-2012-4537

CVE-2012-4537 is a Xen memory DoS issue: when set_p2m_entry fails, Xen 3.4–4.2 may fail to synchronize p2m and m2p tables, enabling local HVM guests to cause memory consumption and assertion failures. The vulnerability is documented in Xen advisories (e.g., AXSA:2013-80:01) and related vendor adv...

CVE-2012-4537

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service memory consumption and assertion failure, aka "Memory mapping failure DoS...

CVE-2012-4539

This CVE affects Xen hypervisor versions 4.0–4.2 when running 32-bit PV guests on 64-bit hosts. The vulnerability is triggered by invalid arguments to GNTTABOP_get_status_frames in the grant table hypercall, allowing a local guest OS administrator to cause a denial-of-service (infinite loop, hang...

Trend Micro tmactmon.sys DOS vulnerability analysis(0day)-vulnerability warning-the black bar safety net

When tmactmon. sys received ioctlcode=0x9100444f the IRP, it will call the Dispatch function for processing, as shown below. . text:0 0 0 1 1 1 1 6 ; int stdcall BugDispatchint, PIRP Irp . text:0 0 0 1 1 1 1 6 BugDispatch proc near ; DATA XREF: sub11C4C+16D o . text:0 0 0 1 1 1 1 6 . text:0 0 0 1...

VMware Security Update Fixes DoS, Other Vulnerabilities

Virtualization software maker VMware shipped a security update for its vSphere API yesterday that resolved a denial of service vulnerability in ESX and ESXi, as well as adding a number of open source security updates to the ESX Service Console. The patch affects the following releases: VMware ESX...

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Apr 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1690...

mysql: unspecified DoS vulnerability related to Server Full Text Search (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search...

Grant table hypercall infinite loop DoS vulnerability

ISSUE DESCRIPTION Due to inappropriate duplicate use of the same loop control variable, passing bad arguments to GNTTABOPgetstatusframes can cause an infinite loop in the compat hypercall handler. IMPACT A malicious guest administrator can trigger the bug. If the Xen watchdog is enabled, the whol...