CVE-2020-3221 Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability

A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper...

CVE-2020-3221 Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability

A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper...

Debian DSA-4694-1 : unbound - security update

Two vulnerabiliites have been discovered in Unbound, a recursive-only caching DNS server; a traffic amplification attack against third-party authoritative name servers NXNSAttack and insufficient sanitisation of replies from upstream servers could result in denial of service via an infinite loop...

openSUSE Security Update : libxml2 (openSUSE-2020-681)

This update for libxml2 fixes the following issues : - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun bsc1161521. - CVE-2019-19956: Fixed a memory leak bsc1159928. - CVE-2020-7595: Fixed an infinite loop in an EOF situation bsc1161517. This update was imported from the SUSE:SLE-15:Update...

Updated nmap packages fix security vulnerability

Updated nmap packages fix security vulnerability: nselibssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse CVE-2017-18594. Also, when a server forced...

Security update for libxml2 (moderate)

openSUSE Security Update: Security update for libxml2 Announcement ID: openSUSE-SU-2020:0681-1 Rating: moderate References: 1159928 1161517 1161521 Cross-References: CVE-2019-19956 CVE-2019-20388 CVE-2020-7595 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...

OPENSUSE-SU-2020:0681-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun bsc1161521. - CVE-2019-19956: Fixed a memory leak bsc1159928. - CVE-2020-7595: Fixed an infinite loop in an EOF situation bsc1161517. This update was imported from the SUSE:SLE-15:Update...

HackerOne: Near to Infinite loop when changing Group's name that has API token as Team Member

Summary: The https://hackerone.com contains an iteration or loop with an exit condition that is near to infinite loop. If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory and even a DoS attack. Description: Hello...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2020:1299-1)

This update for libxml2 fixes the following issues : CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun bsc1161521. CVE-2019-19956: Fixed a memory leak bsc1159928. CVE-2020-7595: Fixed an infinite loop in an EOF situation bsc1161517. Note that Tenable Network Security has extracted the...

dotnet: Denial of service due to infinite loop

An infinite loop was found in the HTTP Routing component of Microsoft.AspNetCore.App, which could be exploited by a remote, unauthenticated attacker. This flaw allows an attacker without special privileges to send crafted requests to a machine running an ASP.NET Core application, triggering the...

dotnet: Denial of service due to infinite loop

An infinite loop was found in the HTTP Routing component of Microsoft.AspNetCore.App, which could be exploited by a remote, unauthenticated attacker. This flaw allows an attacker without special privileges to send crafted requests to a machine running an ASP.NET Core application, triggering the...

Amazon Linux 2 : unbound (ALAS-2020-1430)

The version of unbound installed on the remote host is prior to 1.6.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1430 advisory. infinite loop via malformed DNS answers received from upstream servers CVE-2020-12663 insufficient control of network...

Unknown Vulnerability in Unbound

Unbound is a DNS resolver from the NLnet Labs Foundation in the Netherlands that supports verified recursion and caching. An unspecified vulnerability exists in Unbound. An attacker can exploit this vulnerability to cause an infinite loop with a specially crafted DNS response...

[ASA-202005-14] unbound: denial of service

Arch Linux Security Advisory ASA-202005-14 ========================================== Severity: High Date : 2020-05-20 CVE-ID : CVE-2020-12662 CVE-2020-12663 Package : unbound Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1164 Summary ======= The package unbound...

CVE-2020-12663

A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability...

DEBIAN-CVE-2020-12663

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers...

ALPINE-CVE-2020-12663

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers...

CVE-2020-12663

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers...

CVE-2020-12663

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers...

CVE-2020-12663

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers...