Lucene search
+L

5118 matches found

Exploit DB
Exploit DB
added 2018/06/14 12:00 a.m.38 views

rtorrent 0.9.6 - Denial of Service

Exploit Title: rtorrent 0.9.6 - Denial of Service Date: 2018-01-10 Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connect'1.3.3.7', 6890...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/06/14 12:00 a.m.57 views

rtorrent 0.9.6 Denial Of Service

Exploit Title: rtorrent 0.9.6 - Denial of Service Date: 2018-01-10 Exploit Author: ecx86 Vendor Homepage: http://rtorrent.net Software Link: https://github.com/rakshasa/rtorrent/releases Version: I', lenmsg crash += msg s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connect'1.3.3.7', 6890...

7.4AI score
SaveExploits0
OSV
OSV
added 2018/06/13 4:29 p.m.8 views

DEBIAN-CVE-2018-7162

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service DoS by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshak...

7.5CVSS7.2AI score0.06887EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/06/13 3:48 a.m.51 views

Denial Of Service (DoS)

openssl is vulnerable to denial of service DoS attacks. A malicious user can pass a large prime number during a TLS handshake that can cause the client to take a long time generating a key for this, leading to the client hanging and possibly crashing...

7.5CVSS7.6AI score0.48831EPSS
SaveExploits0References42Affected Software3
Positive Technologies
Positive Technologies
added 2018/06/13 12:00 a.m.9 views

PT-2018-17923 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: Node.js versions 9.x through 10.x Description: The issue allows an attacker to cause a denial of service DoS by crashing a node process that provides an http server supporting TLS server. This can be accomplished by sending duplicate or...

7.8CVSS7.2AI score0.06887EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2018/06/12 10:04 p.m.40 views

Airba.sh - A POSIX-compliant, Fully Automated WPA PSK Handshake Capture Script Aimed At Penetration Testing

Airbash is a POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell tested on Kali Linux and Cyanogenmod 10.2 and uses aircrack-ng to scan for clients that are currently connected to access points AP. Those...

7.2AI score
SaveExploits0References3
NVD
NVD
added 2018/06/12 1:29 p.m.20 views

CVE-2018-0732

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.5CVSS7.5AI score0.48831EPSS
SaveExploits0References37
OSV
OSV
added 2018/06/12 1:29 p.m.31 views

CVE-2018-0732

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.5CVSS7.5AI score
SaveExploits0References37
Cvelist
Cvelist
added 2018/06/12 1:00 p.m.53 views

CVE-2018-0732 Client DoS due to large DH parameter

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.7AI score0.48831EPSS
SaveExploits0References37
Debian CVE
Debian CVE
added 2018/06/12 1:00 p.m.97 views

CVE-2018-0732

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.5CVSS6.4AI score0.48831EPSS
SaveExploits0
CVE
CVE
added 2018/06/12 1:00 p.m.508 views

CVE-2018-0732

CVE-2018-0732 : OpenSSL vulnerability where, during TLS handshakes using DH(E) ciphersuites, a malicious server could send an excessively large prime, causing the client to spend an unreasonably long time computing a key and hang (DoS). The issue is specific to DH parameters during the Server Key...

7.5CVSS7.7AI score0.48831EPSS
SaveExploits0References37Affected Software1
AlpineLinux
AlpineLinux
added 2018/06/12 1:00 p.m.46 views

CVE-2018-0732

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.5CVSS7.8AI score0.48831EPSS
SaveExploits0
OpenSSL
OpenSSL
added 2018/06/12 12:00 a.m.67 views

Client DoS due to large DH parameter

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.5CVSS7.7AI score0.48831EPSS
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
added 2018/06/12 12:00 a.m.33 views

CVE-2018-0732

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

7.5CVSS6.7AI score0.48831EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2018/06/12 12:00 a.m.64 views

OpenSSL -- Client DoS due to large DH parameter

The OpenSSL project reports: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until...

7.5CVSS0.9AI score0.48831EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/11 9:29 p.m.11 views

CVE-2017-7805

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer...

7.5CVSS7.9AI score
SaveExploits0References13
NVD
NVD
added 2018/06/11 9:29 p.m.18 views

CVE-2017-7805

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer...

7.5CVSS8AI score0.03113EPSS
SaveExploits0References13
OSV
OSV
added 2018/06/11 9:29 p.m.5 views

DEBIAN-CVE-2017-7805

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer...

7.5CVSS8.7AI score0.03113EPSS
SaveExploits0References1
Prion
Prion
added 2018/06/11 9:29 p.m.24 views

Design/Logic Flaw

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer...

5CVSS7.7AI score0.03113EPSS
SaveExploits0References13Affected Software4
Cvelist
Cvelist
added 2018/06/11 9:00 p.m.31 views

CVE-2017-7805

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer...

8.2AI score0.03113EPSS
SaveExploits0References13
Rows per page
Query Builder