CVE-2019-6631

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

Design/Logic Flaw

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the thread_list_mutex function in the advanced TFTP server Atftpd, related to the assignment of the NULL pointer, allows a hacker to trigger a service failure.

The vulnerability of the threadlistmutex function in the advanced TFTP server Atftpd is related to the lack of mutex locking before assigning a data structure. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Identity Services Engine’s web interface is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failure.

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to improper input validation. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted LDAP...

The Financial Implications of Online Video Quality

A single instance of video rebuffering could result in more than $85,000 in lost revenue. That's one of the key findings in Understanding the Value of Consistency in OTT Video Delivery, a new report that Akamai has released in conjunction with MTM, a research and consulting firm specializing in...

The vulnerability of Siemens’ web server software lies in insufficient validation of input data, which allows attackers to trigger service failures.

The vulnerability of Siemens’ web server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco AsyncOS operating system’s proxy server for Cisco Web Security Appliance products exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending corrupted HTTP or HTTPS requests t...

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to interrupt traffic processing and trigger a service failure.

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to remotely halt traffic processing and cause a service failure by sending a series of specially crafted packe...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Denial Of Service (DoS)

IPv6 protocol is vulnerable to denial of serviceDos attacks. Remote attacker could leverage the generation of IPv6 atomic fragments to trigger the use of fragmentation in an arbitrary IPv6 flow and subsequently perform any type of a fragmentation-based attack against legacy IPv6 nodes that do not...

Vulnerability of the Server component: The Replication feature of the Oracle MySQL Server database management system, which allows users to trigger a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: The MySQL database management system’s partition, which allows a hacker to cause a service failure.

The vulnerability of the Server component lies in the lack of access control in the MySQL database management system’s partitioning mechanism. Exploiting this vulnerability allows a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for database management in MySQL is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Just-In-Time (JIT) compiler of IonMonkey in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird, related to data writing beyond buffer boundaries, allows an attacker to trigger a service failure.

The vulnerability of the Just-In-Time JIT compiler in IonMonkey web browsers—Firefox, Firefox ESR, and the email processing program Thunderbird—is related to data writing beyond buffer boundaries and memory corruption. Exploiting this vulnerability can allow an attacker to cause service...

The vulnerability of the sparse_dump_region function in the GNU Tar archive utility, which involves reading beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the sparsedumpregion function in the GNU Tar archive manager is related to reading beyond the buffer boundaries when the --sparse flag is used. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to cause service interruptions.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...