CVE-2015-3192

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service memory consumption and out-of-memory errors via a crafted XML file...

CVE-2015-3192

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service memory consumption and out-of-memory errors via a crafted XML file...

CVE-2015-3192: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service memory consumption and out-of-memory errors via a crafted XML file...

PT-2016-6396

Name of the Vulnerable Software and Affected Versions Huawei AR3200 versions prior to V200R007C00SPC900 Description The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by sending a large number of crafted Multiprotocol Label Switching MPLS...

PT-2016-2296

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 8.0.0 through 8.0.0.4 Description The issue is related to a memory leak in queue-manager agents, which can be exploited by remote attackers to cause a denial of service through heap memory consumption. This can be...

SUSE-SU-2016:1696-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.59 to receive various security and bugfixes. Main feature additions: - Improved support for Clustered File System CephFS, fate318586. - Addition of kGraft patches now produces logging messages to simplify auditing fate317827. The followi...

Design/Logic Flaw

The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stack memory consumption via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling...

CVE-2016-1583

The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stack memory consumption via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling...

CVE-2016-1583

CVE-2016-1583 affects the Linux kernel: ecryptfs_privileged_open (fs/ecryptfs/kthread.c) allows a local attacker to gain privileges or cause a denial of service via crafted mmap calls for /proc pathnames, triggering recursive pagefault handling. Affects kernels prior to 4.6.3; patch released in 4...

CVE-2016-5435

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of servi...

Design/Logic Flaw

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

CVE-2015-6289

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

CVE-2015-6289: Undefined Security Weakness

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

MGASA-2016-0232 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumptio...

MGASA-2016-0233 Updated kernel-tmb packages fix security vulnerabilities

This kernel-tmb update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption ...

SUSE-SU-2016:1633-1 Security update for php5

This update for php5 fixes the following issues: - CVE-2013-7456: imagescale out-of-bounds read bnc982009. - CVE-2016-5093: geticuvalueinternal out-of-bounds read bnc982010. - CVE-2016-5094: Don't create strings with lengths outside of valid range bnc982011. - CVE-2016-5095: Don't create strings...

The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure

The vulnerability of the gdImageScaleTwoPass function in the gdinterpolation.c file in the GD Graphics Library’s PHP interpreter is related to the use of non-uniform definitions and memory release mechanisms. Exploiting this vulnerability could allow a remote attacker to trigger a service failure...

MGASA-2016-0225 Updated kernel packages fix security vulnerabilities

This kernel update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by...

CVE-2016-1583

The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stack memory consumption via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling...

Updated libgd packages fix security vulnerabilities

Updated libgd packages fix security vulnerabilities: The gdImageScaleTwoPass function in gdinterpolation.c in libgd before 2.2.0 uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated by a...