433 matches found
DEBIAN-CVE-2017-11410
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: thi...
CVE-2017-11367
The shocodecompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service buffer over-read and application crash via malformed compressed data...
Denial Of Service (DoS)
OpenSSL is vulnerable to denial of service DoS attacks. A malicious user can pass malformed PKCS7 or CMS data to the server that can cause a memory leak that can lead to the system crashing...
CVE-2016-2365
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data to trigger th...
CVE-2016-2848
ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via malformed options data in an OPT resource record...
Tengen Controls Model T-920 PLC IP Segmentation Syntax Denial of Service Vulnerability
T920 is an all-in-one, industrial-grade, high-performance programmable controller from TengControl Technology. A denial of service vulnerability exists in the IP fragmentation syntax of the Tengen T-920 PLC. An attacker can test its fragmentation reorganization capability by sending a data frame...
MICROSYS PROMOTIC Heap Buffer Overflow Vulnerability
MICROSYS PROMOTIC is a Windows-based monitoring and data acquisition HMI software programming suite for industrial applications. MICROSYS PROMOTIC suffers from a heap buffer overflow vulnerability that could allow a remote attacker to conduct a denial-of-service attack using a malformed HTML...
OpenShift: Malformed JSON can cause API process crash
It was found that improper error handling in the API server could cause the master process to crash. A user with network access to the master could use this flaw to crash the master process...
OpenSSL PKCS7_dataDecode Function Denial of Service Vulnerability
OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A security vulnerability exists in the 'PKCS7dataDecode' function in the crypto/pkcs7/pk7doit.c file of OpenSSL. A remote attacker ca...
CVE-2014-8390
Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a 1 CFG or 2 DAT file...
Mandriva Linux Security Advisory : openssl (MDVSA-2015:063)
Multiple vulnerabilities has been discovered and corrected in openssl : The ssl3getkeyexchange function in s3clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORTRSA downgrade attacks and facilitate brute-force decryption...
OpenSSL PKCS#7 Denial of Service Vulnerability
OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. OpenSSL PKCS7 Denial of Service Vulnerability. Due to a program failing to properly handle the absence of an external ContentInfo. A...
Cisco OpenH264 Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can overwrite a heap buffer. This could result in the...
KDE Konqueror 3.0.3 Malformed HTML Page Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7486/info KDE Konqueror has been reported prone to a denial of service vulnerability when rendering a HTML page that contains malformed data. Although unconfirmed, code execution may be possible. The precise technical...
Microsoft SQL Server 2000 SQLXML Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication...
Pigeon Server <= 3.02.0143 Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include winerr.h define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb.h include netinet/in....
Gearbox Software Halo Game Server 1.06/1.07 Infinite Loop Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13728/info The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop. This issue was reported to affect Halo Game...
Cogent DataHub < 7.3.0 Multiple Vulnerabilities
Binary data scadacogentdatahub730.nbin...
Vino VNC Server Remote Denial Of Service Vulnerability
Vino VNC Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vino VNC Server Remote Denial Of Service Vulnerability
This host is running Vino VNC Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvinovncdosvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Vino VNC Server Remote Denial Of Service Vulnerability Authors: Veerendra GG Copyright: Copyright c 2013 Greenbone Network...