DEBIAN-CVE-2018-14648

A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the dosearch function. An unauthenticated attacker could use this flaw to provoke a denial of service...

DEBIAN-CVE-2018-1000654

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in asn1expandobjectidptree, after a long time, the program will be killed. This attack appears to be exploitable via...

Description of the security update for Excel 2016: August 14, 2018

None None...

August 14, 2018—KB4343909 (OS Build 17134.228)

None None...

August 14, 2018—KB4343900 (Monthly Rollup)

None None...

Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2017-9461)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method which could allow denial of service, caused by improper handling of dangling symlinks in smbd. A remote attacker could exploit this vulnerability to cause a fdopenatomic infinite loop with high CPU usage and memor...

WFICA32.exe Shows 100% CPU usage in Task Manager

WFICA32.exe on client shows 100% CPU usage in Task Manager...

IBM Security Access Manager High CPU utilization (CVE-2014-0963) Resolved

Abstract IBM support has released updated fixpacks to resolve CVE-2014-0963. Please install at your earliest convenience. Content Security Bulletin: IBM Tivoli Access Manager High CPU utilization CVE-2014-0963 Security Bulletin: IBM Security Access Manager for Web High CPU utilization CVE-2014-09...

Security Bulletin: IBM Security Access Manager for Web High CPU utilization (CVE-2014-0963)

Summary The Reverse Proxy component in all versions of IBM Security Access Manager for Web is affected by a problem in which, under very specific conditions, CPU utilization can rapidly increase and not decrease. This issue is related to the SSL implementation in IBM Security Access Manager ISAM...

uri-js denial of service vulnerability

uri-js is a JavaScript library for parsing and validating URLs. A security vulnerability exists in the regular expressions used in uri-js 2.1.1 and earlier versions. An attacker can exploit the vulnerability to cause the program to hang and cause CPU usage to reach 100%...

nodejs-tough-cookie: Regular expression denial of service

A regular expression denial of service flaw was found in Tough-Cookie. An attacker able to make an application using Touch-Cookie to parse a sufficiently large HTTP request Cookie header could cause the application to consume an excessive amount of CPU...

CVE-2018-0257

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

CVE-2018-0257

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

Cisco Firepower Threat Defense SSL Engine High CPU Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper error handling while processing SSL traffic. An attacker could exploit this...

Cisco cBR Series Converged Broadband Routers High CPU Usage Denial of Service Vulnerability

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

Cisco Catalyst 3850 and Catalyst 3650 Series Switches IOS XE Software Denial of Service Vulnerability

The Cisco Catalyst 3850 and Catalyst 3650 Series Switches are both different families of switching devices from Cisco, Inc.IOS XE Software is a set of operating systems running on them that is specific to Cisco devices. A denial of service vulnerability exists in the IP version 4 IPv4 processing...

CVE-2018-0177

A vulnerability in the IP Version 4 IPv4 processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads ...

Wireshark epan/dissectors/packet-openflow_v6.c file denial of service vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-openflowv6.c file in...

Code injection

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions e.g., passthru, exec, shellexec, or system with a non-blocking STDIN stream, causing this...

CVE-2018-1041

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop...