551 matches found
OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)
It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak...
SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients...
OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)
It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory...
Samba 'fd_open_atomic infinite loop' DoS Vulnerability (CVE-2017-9461)
Samba is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...
CVE-2017-9461
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption due to wrongly handling dangling symlinks...
CVE-2017-1000361
DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...
April 18, 2017âKB4015553 (Preview of Monthly Rollup)
None None...
PT-2017-18935
Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.4.10 Samba versions 4.5.x prior to 4.5.6 Description The issue is related to a denial of service due to the incorrect handling of dangling symlinks by smbd in Samba. This results in an infinite loop with high CPU usag...
CVE-2017-3820
A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...
CVE-2017-3820
CVE-2017-3820 affects Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE (releases 3.13.6S, 3.16.2S, or 3.17.1S). The vulnerability arises from an incorrect initialized variable in SNMP handling, allowing an authenticated, remote attacker to trigger high CPU usage and DoS via...
CVE-2017-3820: Improper Initialization
A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...
PT-2017-16119
Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 Series Aggregation Services Routers versions 3.13.6S through 3.17.1S Cisco ASR 1000 Series Aggregation Services Routers version 15.53S2.1 Cisco ASR 1000 Series Aggregation Services Routers version 15.61S1.1 Description A...
CVE-2016-6580
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority informati...
CVE-2016-6580: Undefined Security Weakness
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority informati...
StreamProcess.exe is consuming high CPU spike on PVS Servers.
The Streamprocess.exe was consuming high CPU on the PVS servers. The Perfmon suggested sustained spike in Kernel mode and process dumps revealed that we were waiting for the Packet Send & Receive...
Ovs-vswitchd daemon showing high CPU usage
XenServer 6.5 SP1 heavy IO traffic/ CPU utilization with open vswitch technology. Ovs-vswitchd daemon running on the XS was showing high CPU usage and performance tab shows heavy CPU usage...
Multiple Denial of Service Vulnerabilities in Wireshark (CNVD-2016-07477)
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from multiple denial-of-service vulnerabilities that allow attackers t...
Red Hat OpenShift Enterprise Denial of Service Vulnerability
Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, U.S. OpenShift Enterprise is an open source version of the private cloud. A denial of service vulnerability exists in Negotiator in Red Hat OpenShift Enterprise versions 3.1 and 3.2, which can be exploited by...
nodejs-minimatch: Regular expression denial-of-service
A regular expression denial of service flaw was found in Minimatch. An attacker able to make an application using Minimatch to perform matching using a specially crafted glob pattern could cause the application to consume an excessive amount of CPU...
BusyBox 'networking/ntpd.c' Remote Denial of Service Vulnerability
BusyBox is an executable implementation of many standard Linux tools. A remote denial of service vulnerability exists in BusyBox 'networking/ntpd.c'. An attacker can exploit the vulnerability to cause an application to enter an infinite loop and consume excessive CPU resources, resulting in a...