Lucene search
+L

83 matches found

RedhatCVE
RedhatCVE
added 2018/03/28 4:49 a.m.27 views

CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.5CVSS3.2AI score0.0222EPSS
SaveExploits1References2
CNVD
CNVD
added 2018/03/27 12:00 a.m.11 views

CUPS Denial of Service Vulnerability

Apple CUPS Common Unix Printing System is the United States Apple Apple, Inc. a set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A security vulnerability exists in th...

5.3CVSS6.5AI score0.0222EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/26 5:29 p.m.5 views

DEBIAN-CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.3CVSS7AI score0.0222EPSS
SaveExploits1References1
NVD
NVD
added 2018/03/26 5:29 p.m.15 views

CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.3CVSS5.5AI score0.0222EPSS
SaveExploits1References7
Prion
Prion
added 2018/03/26 5:29 p.m.23 views

Design/Logic Flaw

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

3.5CVSS5.4AI score0.0222EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2018/03/26 5:29 p.m.32 views

CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.3CVSS5.6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2018/03/26 5:00 p.m.25 views

CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.5AI score0.0222EPSS
SaveExploits1References7
CVE
CVE
added 2018/03/26 5:00 p.m.305 views

CVE-2017-18248

The connected documents confirm CVE-2017-18248 affects CUPS prior to 2.2.6. The vulnerability resides in add_job in scheduler/ipp.c when D-Bus support is enabled: remote attackers can crash the CUPS daemon by sending print jobs with an invalid username, via a D-Bus notification. The documented im...

5.3CVSS5.3AI score0.0222EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
added 2018/03/26 5:00 p.m.58 views

CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.3CVSS5.7AI score0.0222EPSS
SaveExploits1
OSV
OSV
added 2018/03/26 12:00 a.m.8 views

UBUNTU-CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.3CVSS6.4AI score0.0222EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2018/03/26 12:00 a.m.24 views

CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

5.3CVSS6.5AI score0.0222EPSS
SaveExploits1References4
Citrix
Citrix
added 2017/03/06 12:00 a.m.11 views

Invalid password "nsgslbautosync: unable to establish master SSH connection: master process exited"

After changing the RPC passwords on our Netscalers, GSLB synchronization fails. Reverting to the default passwords allows GSLB sync to function. A non-default password is desired. Errors in the ns.log: "nsgslbautosync: Error executing command on gslb site...Reason: Error: Invalid username or...

7.4AI score
SaveExploits0
Hacker One
Hacker One
added 2016/09/18 11:56 p.m.20 views

RubyGems: Invalid username updating

Hello Rubygems, This is my first report on Hackerone, so please tell me if you need further information. This vulnerability/glitch uses the 'Edit Profile' page. How to do it: 1. Login to any account on Rubygems 2. Go to your profile 3. Go to 'Edit Profile' 4. In Handle, put the invalid username 5...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:00 a.m.11 views

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the SRPVBASEgetbyuser function implementation in the OpenSSL library is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause a service failure e.g., excessive memory consumption by entering an invalid user name during a...

7.8CVSS7.4AI score0.24409EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2016/03/03 8:59 p.m.12 views

CVE-2016-0798

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

7.5CVSS6.8AI score
SaveExploits0References25
OSV
OSV
added 2016/03/03 8:59 p.m.5 views

DEBIAN-CVE-2016-0798

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

7.5CVSS9.1AI score0.24409EPSS
SaveExploits1References1
Prion
Prion
added 2016/03/03 8:59 p.m.28 views

Memory corruption

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

7.8CVSS8.8AI score0.24409EPSS
SaveExploits1References25Affected Software1
Debian CVE
Debian CVE
added 2016/03/03 12:00 a.m.33 views

CVE-2016-0798

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

7.8CVSS8.5AI score0.24409EPSS
SaveExploits1
OSV
OSV
added 2016/03/01 1:00 p.m.8 views

UBUNTU-CVE-2016-0798

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

7.5CVSS7.2AI score0.24409EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2016/03/01 1:00 p.m.36 views

CVE-2016-0798

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

7.8CVSS7.2AI score0.24409EPSS
SaveExploits1References3
Rows per page
Query Builder