The Financial Implications of Online Video Quality

A single instance of video rebuffering could result in more than $85,000 in lost revenue. That's one of the key findings in Understanding the Value of Consistency in OTT Video Delivery, a new report that Akamai has released in conjunction with MTM, a research and consulting firm specializing in...

The vulnerability of Siemens’ web server software lies in insufficient validation of input data, which allows attackers to trigger service failures.

The vulnerability of Siemens’ web server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to interrupt traffic processing and trigger a service failure.

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to remotely halt traffic processing and cause a service failure by sending a series of specially crafted packe...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco AsyncOS operating system’s proxy server for Cisco Web Security Appliance products exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending corrupted HTTP or HTTPS requests t...

Denial Of Service (DoS)

IPv6 protocol is vulnerable to denial of serviceDos attacks. Remote attacker could leverage the generation of IPv6 atomic fragments to trigger the use of fragmentation in an arbitrary IPv6 flow and subsequently perform any type of a fragmentation-based attack against legacy IPv6 nodes that do not...

Vulnerability of the Server component: The Replication feature of the Oracle MySQL Server database management system, which allows users to trigger a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The MySQL database management system’s partition, which allows a hacker to cause a service failure.

The vulnerability of the Server component lies in the lack of access control in the MySQL database management system’s partitioning mechanism. Exploiting this vulnerability allows a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the Just-In-Time (JIT) compiler of IonMonkey in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird, related to data writing beyond buffer boundaries, allows an attacker to trigger a service failure.

The vulnerability of the Just-In-Time JIT compiler in IonMonkey web browsers—Firefox, Firefox ESR, and the email processing program Thunderbird—is related to data writing beyond buffer boundaries and memory corruption. Exploiting this vulnerability can allow an attacker to cause service...

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for database management in MySQL is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the sparse_dump_region function in the GNU Tar archive utility, which involves reading beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the sparsedumpregion function in the GNU Tar archive manager is related to reading beyond the buffer boundaries when the --sparse flag is used. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to cause service interruptions.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server: Optimizer component of the Oracle MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the `ofproto_rule_insert__()` function in the Open vSwitch software multi-level switch allows a attacker to cause a service failure.

The vulnerability of the ofprotoruleinsert function in the microprogramming-based software for programmable multi-level switches called Open vSwitch OvS is related to errors in rule checking during flow processing. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the Yokogawa Vnet/IP Open communication driver, related to resource management errors, allows a perpetrator to cause service interruptions.

The vulnerability of the Yokogawa Vnet/IP Open Communication driver is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Libarchive library for working with archives, related to double memory release, allows a perpetrator to trigger a service failure.

The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to an error in the RAR format decoder, which causes resources in memory to be re-allocated. Exploiting this vulnerability could allow a remote attacker to cause service...

Code injection

In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

CVE-2019-6603

The CVE-2019-6603 issue affects F5 BIG-IP products as described in the primary vulnerability entry and is corroborated by F5’s advisory. Affected versions: BIG-IP 11.5.1–11.5.8, 11.6.1–11.6.3, 12.1.0–12.1.3, and 13.0.0–13.0.1 are vulnerable to malformed TCP packets sent to a self IP address or a ...