CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

PT-2018-1888

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description The issue is related to a library management vulnerability in libvirt, which is caused by an error leading to excessive memory consumption when processing a large QEMU data stream. This can b...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2017-1000411

Multiple "expired" flows consume memory resources of CONFIG DS which leads to Controller shutdown...

Fedora 27 : git (2017-2c7ddf53d3)

Previous versions of git mishandled layers of tree objects, which allowed remote attackers to cause a denial of service memory consumption via a crafted repository, aka a git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attem...

Ruby: Integer Underflow @ ossl_cipher_pkcs5_keyivgen

Integer Underflow @ osslcipherpkcs5keyivgen file : ext/openssl/osslcipher.c affected parameter: iterations INFO Generates and sets the key/IV based on a password. call-seq: cipher.pkcs5keyivgenpass, salt = nil, iterations = 2048, digest = "MD5" - nil ANALYSIS iterint in osslcipherpkcs5keyivgen...

CVE-2017-1666: Improper Restriction of XML External Entity Reference

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 133540...

PT-2018-6301

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.7 Description: The issue allows a remote attacker to exploit the vulnerability to expose sensitive information or consume memory resources through a XML External Entity Injection XXE...

CVE-2018-5244

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

CVE-2018-5244

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

Design/Logic Flaw

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

CVE-2018-5244

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

CVE-2018-5244

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

CVE-2018-5244

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

CVE-2018-5244: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service host OS memory consumption by rebooting many...

PT-2018-16835

Name of the Vulnerable Software and Affected Versions Xen version 4.10 Description A denial of service issue exists due to a tracking structure not being freed when a vcpu is destroyed, allowing guest OS administrators to cause host OS memory consumption by rebooting many times. Recommendations F...

USN-3430-3: Dnsmasq regression

USN-3430-2 fixed several vulnerabilities. The update introduced a new regression that breaks DNS resolution. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher discovered that Dnsmasq...

Security update for ImageMagick (important)

This update for ImageMagick fixes the following issues: CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 Memory le...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 - CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 -...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1362)

This update for GraphicsMagick fixes the following issues : - CVE-2017-12140: ReadDCMImage in coders\dcm.c has a ninteger signedness error leading to excessive memory consumption bnc1051847 - CVE-2017-14994: NULL pointer in ReadDCMImage in coders/dcm.c could lead to denial of service bnc1061587 -...