PT-2017-10954

Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.1 and earlier Description The issue concerns the qsort function in OpenBSD, which is recursive and not randomized. An attacker can create a specific input array that causes the function to recurse a certain number of times,...

Memory corruption

Memory leak in QEMU aka Quick Emulator, when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service memory consumption by repeatedly hot-unplugging the device...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

Code injection

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9473

CVE-2017-9473 affects ytnef 1.9.2 playwrights of the lib/ytnef.c TNEFFillMapi function, where deserialization/processing of crafted winmail.dat content can trigger memory exhaustion and cause denial of service. Public entries in OpenVAS/Ubuntu/Fedora advisories confirm the vulnerability in libytn...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

UBUNTU-CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9473: Undefined Security Weakness

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

Samba 'fd_open_atomic infinite loop' DoS Vulnerability (CVE-2017-9461)

Samba is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

PT-2017-18946

Name of the Vulnerable Software and Affected Versions ytnef version 1.9.2 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by using a crafted file. This is related to the TNEFFillMapi function in lib/ytnef.c. Recommendations For ytnef...

Denial of service

smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption due to wrongly handling dangling symlinks...

CVE-2017-9461

smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption due to wrongly handling dangling symlinks...

CVE-2017-9461

CVE-2017-9461 affects Samba smbd with a denial-of-service vulnerability caused by mis-handling dangling symlinks, leading to an infinite fd_open_atomic loop and high CPU/memory use. Affected versions are Samba before 4.4.10 and 4.5.x before 4.5.6. Remediation per sources is to upgrade to fixed re...

CVE-2017-9060

Memory leak in the virtiogpusetscanout function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service memory consumption via a large number of "VIRTIOGPUCMDSETSCANOUT:" commands...

CVE-2017-9060

Memory leak in the virtiogpusetscanout function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service memory consumption via a large number of "VIRTIOGPUCMDSETSCANOUT:" commands...

Internet Bug Bounty: rpcbind "rpcbomb" CVE-2017-8779, CVE-2017-8804

Description: this allowed an attacker to easily disrupt a remote system through excessive memory consumption. Writeup: https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/ Demonstration video: https://www.youtube.com/watch?v=b38H3oEgrQw this video shows...

CVE-2017-9119

The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and application crash or possibly have unspecified other impact by triggering crafted operations on array data structures...