CVE-2020-9223

There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may exploit this vulnerability to cause a denial of service DoS on the specific module...

Denial of Service Vulnerability in S7 300 CPU319-3/CP343-1

Siemens China Ltd. is focused on electrification, automation and digitalization. A denial of service vulnerability exists in S7 300 CPU319-3/CP343-1, where an attacker can cause the PLC CPU module and CP module to go down, requiring a manual reboot of the PLC to recover. Other sub-function codes...

UBUNTU-CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

DEBIAN-CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

Out-of-bounds

An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the...

Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Memory Read Vulnerability

The Medfusion 4000 Wireless Syringe Infusion Pump is a syringe infusion pump deployed in healthcare and public health for delivering small doses of medication in acute care settings. A memory read vulnerability exists in the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, where a...

Brocade NetIron Denial of Service Vulnerability

Brocade NetIron OS is a set of operating systems from Brocade Communications Systems Brocade that run in devices such as switches and routers. A security vulnerability exists in Brocade NetIron versions 05.8.00 through 06.1.00 due to the program failing to properly detect anomalies. An attacker...

Updated conntrack-tools packages fix CVE-2015-6496

Updated conntrack-tools packages fix security vulnerability: It was discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets CVE-2015-6496...

CVE-2015-4199

CVE-2015-4199 is a race-condition vulnerability in Cisco IOS 15.3S on UBR devices, specifically in the IPv6-to-IPv4 subsystem within the Performance Routing Engine (PRE). The underlying issue can cause a NULL pointer free/crash of the PRE module, leading to a denial of service. Exploitation, as d...

Code injection

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

MGASA-2015-0099 Updated apache packages fix CVE-2015-0228

Updated apache packages fix security vulnerability: In the modlua module in the Apache HTTP Server through 2.4.10, a maliciously crafted websockets PING after a script calls r:wsupgrade can cause a child process crash CVE-2015-0228...

CVE-2013-2761

Summary: CVE-2013-2761 affects Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules. Vulnerability: Remote authenticated users can trigger a denial of service (module crash) by sending crafted FTP traffic (as demonstrated with FileZilla). Impact: Partial availability loss of the affected...

DEBIAN-CVE-2007-6684

The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service crash via a request without a Transport parameter, which triggers a NULL pointer dereference...

CVE-2007-6094

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...