mod_auth_mellon denial of service vulnerability (CNVD-2016-02441)

modauthmellon is an Apache module that provides simple SAML Security Assertion Markup Language 2.0 services. A denial of service vulnerability exists in the amreadpostdata function in versions of modauthmellon prior to 0.11.1, which can be exploited by a remote attacker to cause a denial of servi...

DEBIAN-CVE-2016-2146

The amreadpostdata function in modauthmellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service worker process crash, web server deadlock, or memory consumption via a large amount of POST data...

CVE-2016-4001

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

UBUNTU-CVE-2016-4001

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

DEBIAN-CVE-2014-9766

Integer overflow in the createbits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via large height and stride values...

CVE-2014-9766

Integer overflow in the createbits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via large height and stride values...

imlib2 Integer Overflow Vulnerability

imlib2 is a general-purpose graphics loading and rendering library. An integer overflow vulnerability exists in imlib2 that can be exploited by an attacker to cause a denial of service invalid reads and large memory allocations...

BSA-2016-1052

Security Advisory ID : BSA-2016-1052 Component : TCP Sequence Number Revision : 4.0: Final A vulnerability was discovered in the Transmission Control Protocol TCP specification RFC 873. TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a...

DEBIAN-CVE-2016-2851

Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

DEBIAN-CVE-2015-8836

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

Ubuntu 14.04 LTS : Quagga vulnerabilities (USN-2941-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2941-1 advisory. Kostya Kortchinsky discovered that Quagga incorrectly handled certain route data when configured with BGP peers enabled for VPNv4. A remote attacker coul...

USN-2941-1 quagga vulnerabilities

Kostya Kortchinsky discovered that Quagga incorrectly handled certain route data when configured with BGP peers enabled for VPNv4. A remote attacker could use this issue to cause Quagga to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-2342 It was discovered...

Ubuntu 14.04 LTS : PAM vulnerabilities (USN-2935-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2935-1 advisory. It was discovered that the PAM pamuserdb module incorrectly used a case-insensitive method when comparing hashed passwords. A local attacker could possib...

PT-2016-1336

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.1 through 1.0.1s OpenSSL versions 1.0.2 through 1.0.2g Description The issue is related to the doapr outch function in OpenSSL, which does not verify that a certain memory allocation succeeds. This allows remote attackers ...

PT-2017-8926 · Inverse +1 · Sogo +1

Name of the Vulnerable Software and Affected Versions: SOGo version 2.3.7 Description: A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a large number of attempts to upload a large attachment, related to temporary files. Recommendations: For SOGo...

GTK+ Integer Overflow Vulnerability

GTK+ is a multi-platform toolkit for creating graphical user interfaces. An integer overflow vulnerability exists in versions of GTK+ prior to 3.9.8, which allows remote attackers to cause a denial of service via a large image file triggering a large memory allocation...