Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-4736

Malware in sbrugna...

5CVSS6.3AI score0.02311EPSS
Exploits1References11
OSV
OSV
added 2023/05/25 11:15 p.m.4 views

AZL-26913 CVE-2023-32067 affecting package c-ares for versions less than 1.19.1-1

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...

7.5CVSS6.6AI score0.00343EPSS
Exploits0References1
OSV
OSV
added 2023/05/25 11:15 p.m.0 views

UBUNTU-CVE-2023-32067

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...

7.5CVSS6.6AI score0.00343EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.2 views

SUSE CVE-2002-2443

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that triggers a communication loop, as...

5CVSS6.9AI score0.15013EPSS
Exploits2References6
Vulnrichment
Vulnrichment
added 2016/12/09 8:0 p.m.2 views

CVE-2016-6301

The recvandprocessclientpkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged NTP packet, which triggers a communication loop...

7.2AI score0.0488EPSS
Exploits5References13
CNVD
CNVD
added 2016/06/03 12:0 a.m.2 views

ntpd Denial of Service Vulnerability (CNVD-2016-03823)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A denial of service vulnerability exists in ntpd versions prior to 4.2.8p7. An attacker can exploit this vulnerability by sending a...

5.3CVSS7.1AI score0.01418EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2013/06/20 12:0 a.m.46 views

MIT Kerberos 5 kpasswd UDP Packet Denial Of Service Vulnerability

This host is running MIT Kerberos and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbmitkrb5kpasswdpingpongdosvuln.nasl 8236 2017-12-22 10:28:23Z cfischer $ MIT Kerberos 5 kpasswd UDP Packet Denial Of Service Vulnerability Authors: Veerendra G.G Copyright: Copyrigh...

5CVSS0.3AI score0.15013EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2013/06/12 4:46 p.m.1 views

krb5: UDP ping-pong flaw in kpasswd

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that triggers a communication loop, as...

5CVSS7.3AI score0.45804EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2013/06/04 12:0 a.m.52 views

FreeBSD : krb5 -- UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443] (e3f64457-cccd-11e2-af76-206a8a720317)

No advisory has been released yet. schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that...

5CVSS7.3AI score0.15013EPSS
Exploits2References3
CVE
CVE
added 2013/05/29 10:0 a.m.249 views

CVE-2002-2443

CVE-2002-2443 affects MIT Kerberos 5 (krb5) kadmind, specifically the kpasswd service, where schpw.c does not validate incoming UDP packets. This can allow a remote attacker to cause a denial of service via a forged UDP packet that triggers a packet/communication loop, consuming CPU and bandwidth...

5CVSS5.3AI score0.15013EPSS
Exploits2References12Affected Software1
UbuntuCve
UbuntuCve
added 2013/05/10 12:0 a.m.26 views

CVE-2002-2443

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged packet that triggers a communication loop, as...

5CVSS7.2AI score0.15013EPSS
Exploits2References2
NVD
NVD
added 2007/09/08 1:17 a.m.12 views

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

5CVSS6.7AI score0.02311EPSS
Exploits1References10
UbuntuCve
UbuntuCve
added 2007/09/08 1:17 a.m.16 views

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

5CVSS6AI score0.02311EPSS
Exploits1References1
OSV
OSV
added 2007/09/08 1:17 a.m.5 views

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

7AI score
Exploits0References10
CVE
CVE
added 2007/09/08 1:0 a.m.41 views

CVE-2007-4755

CVE-2007-4755 affects Alien Arena 2007 (version 6.10 and earlier). The issue allows remote attackers to cause a denial of service (client disconnect) by sending a forged client_connect command from the server to a client. The note indicates client IP addresses may be exposed via product-specific ...

5CVSS6.7AI score0.02311EPSS
Exploits1References10Affected Software1
Debian CVE
Debian CVE
added 2007/09/08 1:0 a.m.13 views

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

5CVSS6.3AI score0.02311EPSS
Exploits1
Cvelist
Cvelist
added 2007/09/08 1:0 a.m.15 views

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

6.7AI score0.02311EPSS
Exploits1References10
Rows per page
Query Builder