4521 matches found
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the Mediaserver component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
USN-3181-1: OpenSSL vulnerabilities
Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other releases were...
Debian DLA-805-1 : bind9 security update
Several denial of service vulnerabilities assertion failures were discovered in BIND, a DNS server implementation. CVE-2016-9131 A crafted upstream response to an ANY query could cause an assertion failure. CVE-2016-9147 A crafted upstream response with self-contradicting DNSSEC data could cause ...
Denial Of Service (DoS)
OpenSSL is vulnerable to denial of service attacks. The attacks are due to a flaw in the way OpenSSL does the SSLv2 handshake messages. Therefore, when it has SSLv2 and EXPORT-grade cipher suites enabled, attackers can send malicious SSLv2 CLIENT-MASTER-Key messages to cause server failures...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the PDFium component in the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through a specially created PDF file...
openSUSE Security Update : bind (openSUSE-2017-114)
This update for bind fixes the following issues : - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the STMicroelectronics Android operating system driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the HTC Android operating system’s driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
Debian DSA-3758-1 : bind9 - security update
Several denial-of-service vulnerabilities assertion failures were discovered in BIND, a DNS server implementation. - CVE-2016-9131 A crafted upstream response to an ANY query could cause an assertion failure. - CVE-2016-9147 A crafted upstream response with self-contradicting DNSSEC data could...
SUSE SLES11 Security Update : bind (SUSE-SU-2017:0112-1)
This update for bind fixes the following issues : - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...
Debian Security Advisory DSA 3758-1 (bind9 - security update)
Several denial-of-service vulnerabilities assertion failures were discovered in BIND, a DNS server implementation. CVE-2016-9131 A crafted upstream response to an ANY query could cause an assertion failure. CVE-2016-9147 A crafted upstream response with self-contradicting DNSSEC data could cause ...
BIND -- multiple vulnerabilities
ISC reports: A malformed query response received by a recursive server in response to a query of RTYPE ANY could trigger an assertion failure while named is attempting to add the RRs in the query response to the cache. Depending on the type of query and the EDNS options in the query they receive,...
LSASS deadlocks cause Windows Server 2012 R2 or Windows Server 2012 not to respond
LSASS deadlocks cause Windows Server 2012 R2 or Windows Server 2012 not to respond This article describes an issue that occurs when Local Security Authority Subsystem Service LSASS deadlocks on Windows Server 2012 R2 or Windows Server 2012. You can fix this issue by using the update in this...
Citrix Director - Failure Reasons Troubleshooting Guide
Table of Contents Overview User Connection Failures Machine Failures Overview Citrix Director is a comprehensive monitoring and troubleshooting tool that integrates with XenApp and XenDesktop environments. The solution provides a single pane of glass for Citrix support and administrator teams to...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the icmp6send function in the Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially crafted fragmented IPv6 packet...
DEBIAN-CVE-2016-9839
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
PT-2016-7839 · Mapserver · Mapserver
Name of the Vulnerable Software and Affected Versions: MapServer versions prior to 7.0.3 Description: The issue is related to the OGR driver in MapServer, where error messages are too verbose. This verbosity may lead to the leakage of sensitive information if a data connection fails...
Microsoft Edge - CBaseScriptable::PrivateQueryInterface Memory Corruption (MS16-068)
Microsoft Edge - CBaseScriptable::PrivateQueryInterface Memory Corruption MS16-068 Source: http://blog.skylined.nl/20161205001.html Synopsis A specially crafted web-page can trigger a memory corruption vulnerability in Microsoft Edge. I did not investigate this vulnerability thoroughly, so I...
PT-2017-7980
Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 through 11.0 Description The issue allows remote attackers to inject arguments to login and bypass authentication via vectors involving a sequence of memory allocation failures. Recommendations For versions 9.3 through 11....