Red Hat Infinispan 安全漏洞

Red Hat Infinispan is a suite of distributed caching and key-value NoSQL datastore software from Red Hat USA. A security vulnerability exists in Red Hat Infinispan that stems from a possible buffer leak in the REST compare API, which could result in an out-of-memory error when sending successive...

mod_auth_mellon denial of service vulnerability (CNVD-2016-02441)

modauthmellon is an Apache module that provides simple SAML Security Assertion Markup Language 2.0 services. A denial of service vulnerability exists in the amreadpostdata function in versions of modauthmellon prior to 0.11.1, which can be exploited by a remote attacker to cause a denial of servi...

DEBIAN-CVE-2016-2146

The amreadpostdata function in modauthmellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service worker process crash, web server deadlock, or memory consumption via a large amount of POST data...