8 matches found
Denial Of Service
codeigniter4/framework is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient validation in the formatMessage function within the language, allowing an attacker to consume a large amount of memory on the server...
ALPINE-CVE-2016-7416
ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...
CVE-2016-7416
ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...
CVE-2016-7416
CVE-2016-7416 affects PHP up to 5.6.25/7.x up to 7.0.10 and PHP 5.6.26+ / 7.0.11+ fixed builds; the issue is in ext/intl/msgformat/msgformat_format.c where the ICU Locale length is not properly restricted. This allows remote attackers to cause a denial of service (application crash) via MessageFo...
CVE-2016-7416: Improper Restriction of Operations within the Bounds of a Memory Buffer
ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...
PT-2016-3379
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 PHP versions 7.x prior to 7.0.11 Description The issue is caused by a buffer overflow in the ext/intl/msgformat/msgformat format.c component of the PHP interpreter. This can be exploited by a remote attacker to cau...
CVE-2001-0542: Undefined Security Weakness
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions 1 raiserror, 2 formatmessage, or 3 xpsprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879...
