Apache HTTP Server < 2.4.39 mod_http2 Use-After-Free Vulnerability - Windows

Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a reference...

CVE-2019-0196

A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly...

Phoenix Contact RAD-80211-XD/HP-BUS and Phoenix Contact RAD-80211-XD Command Injection Vulnerability

The Phoenix Contact RAD-80211-XD/HP-BUS and Phoenix Contact RAD-80211-XD are both high power WLAN wireless transceivers from Phoenix Contact, Germany. A command injection vulnerability exists in the PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS, which can be exploited by an attacker to...

Apache Httpd < 2.4.39 : mod_http2, read-after-free on a string compare

Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparision when determining the method of a request and thus process the request incorrectly...

CVE-2018-14055

ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege and inject rogue values into znc.conf...

Huawei FusionSphere and FusionSphere OpenStack Command Injection Vulnerability (CNVD-2017-09508)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A command injection vulnerability exists in Huawei...

RedHat Linux 6.x X Font Server DoS and Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This will prevent the X server from...

Splunk Enterprise 6.x < 6.0.1 Malformed Packet DoS

According to its version number, the Splunk Enterprise hosted on the remote web server may be affected by a denial of service vulnerability that is triggered by malformed network input, resulting in the Splunk server becoming unavailable. Note that this only affects Splunk Enterprise 6.0 componen...

USN-1062-1: Kerberos vulnerabilities

Keiichi Mori discovered that the MIT krb5 KDC database propagation daemon kpropd is vulnerable to a denial of service attack due to improper logic when a worker child process exited because of invalid network input. This could only occur when kpropd is running in standalone mode; kpropd was not...

Mandriva Linux Security Advisory : krb5 (MDVSA-2011:025)

Multiple vulnerabilities were discovered and corrected in krb5 : The MIT krb5 KDC database propagation daemon kpropd is vulnerable to a denial-of-service attack triggered by invalid network input. If a kpropd worker process receives invalid input that causes it to exit with an abnormal status, it...

[ GLSA 200805-08 ] InspIRCd: Denial of Service

Gentoo Linux Security Advisory GLSA 200805-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

InspIRCd: Denial of service

Background InspIRCd Inspire IRCd is a modular C++ IRC daemon. Description The "namesx" and "uhnames" modules do not properly validate network input, leading to a buffer overflow. Impact A remote attacker can send specially crafted IRC commands to the server, causing a Denial of Service. Workaroun...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

RedHat Linux 6.x - X Font Server Buffer Overflow Denial of Service // source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This...

qwcrash.pl

Date: Wed, 4 Nov 1998 16:30:18 +0100 From: Paul Boehm To: [email protected] Subject: quakeworld/win32 DoS the output of the attached perl script, when piped through netcat, crashes quakeworld for win32. As i don't have any win32 debuging tools and the problem doesn't occur under linux i can't...