PT-2014-1437

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.10 Description The issue is related to the mod cgid module, which lacks a timeout mechanism. This allows remote attackers to cause a denial of service process hang by sending a request to a CGI script...

Bray Systems Linux Trustees 1.5 Long Pathname Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the application to...

Cerbere Proxy Server 1.2 Long Host Header Field Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11085/info Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server. A remote attacker may caus...

Debian 2.1,Linux kernel 2.0.x,RedHat 5.2 Packet Length with Options Vulnerability

No description provided by source. / source: http://www.securityfocus.com/bid/870/info Debian 2.1,Linux kernel 2.0.34/2.0.35/2.0.36/2.0.37/2.0.38,RedHat 5.2 i386 Packet Length with Options Vulnerability A vulnerability in the Linux kernel's TCP/IP allows local users to crash, hang or corrupt the...

PT-2014-4907

Name of the Vulnerable Software and Affected Versions Microsoft Malware Protection Engine versions prior to 1.1.10701.0 Description The issue allows remote attackers to cause a denial of service, resulting in a system hang, by using a crafted file. This is related to the mpengine.dll component...

CVE-2014-2779: Improper Input Validation

mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service system hang via a crafted file...

Denial of service

The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service non-paged pool memory consumption and system hang via...

HackerOne: Potential denial of service in hackerone.com/teams/new

While creating a new team, if I set the bounty to a large value over 1,000,000 digits and send the request the website hangs for about a minute and a half, then pops up an error page saying there is an error on your end...

Updated kernel-tmb packages fix multiple vulnerabilities

Updated kernel-tmb provides upstream 3.10.40 kernel and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of...

CVE-2014-3270

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

Design/Logic Flaw

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-3270

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-3270

Cisco IOS XR DHCPv6 implementation vulnerability (CVE-2014-3270) allows remote, unauthenticated attackers to cause a denial-of-service by sending malformed DHCPv6 packets, triggering a hang in the DHCPv6 server process. Affected: Cisco IOS XR software with DHCPv6 server functionality. Root cause:...

CVE-2014-3270: Improper Input Validation

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-2310

The CVE-2014-2310 vulnerability concerns Net-SNMP’s AgentX subagent. It affects the AgentX subagent in Net-SNMP versions before 5.4.4 where processing a multi-object GET/GETNEXT request with an OID that contains more subidentifiers than prior requests can cause the snmpd process to hang, resultin...

Debian DSA-2899-1 : openafs - security update

Michael Meffie discovered that in OpenAFS, a distributed filesystem, an attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the fileserver, and potentially permitting the execution of arbitrary code. In addition, this update addresses a minor deni...

CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

SuSE 11.3 Security Update : Linux Kernel (SAT Patch Numbers 9047 / 9050 / 9051)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix various bugs and security issues. ---------------------------------------------------------------------- - WARNING: If you are running KVM with PCI pass-through on a system with one of the following Intel chipsets: 5500 revisio...

CVE-2014-1500

CVE-2014-1500 affects Mozilla Firefox prior to 28.0 and SeaMonkey prior to 2.25. The issue allows remote attackers to cause resource exhaustion and application hang via onbeforeunload events that trigger background JavaScript execution. Exploitation details are not provided in the available docum...