Lucene search
K

515 matches found

RedHat Linux
RedHat Linux
added 2013/02/19 8:31 p.m.4 views

tomcat: HTTP NIO connector OOM DoS via a request with large headers

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service memory consumption via a large amount of head...

5CVSS7.4AI score0.0898EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2013/02/19 8:31 p.m.2 views

Tomcat - Denial Of Service when using NIO+SSL+sendfile

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service infinite loop by terminating the connection during the reading of a...

2.6CVSS7.3AI score0.07452EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2013/02/19 8:29 p.m.1 views

Tomcat - Denial Of Service when using NIO+SSL+sendfile

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service infinite loop by terminating the connection during the reading of a...

2.6CVSS7.3AI score0.07452EPSS
Exploits1References4
Fedora
Fedora
added 2013/02/08 5:2 p.m.27 views

[SECURITY] Fedora 17 Update: squid-3.2.5-2.fc17

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

5CVSS8.2AI score0.2318EPSS
Exploits1
Fedora
Fedora
added 2012/12/26 4:56 a.m.32 views

[SECURITY] Fedora 16 Update: squid-3.2.5-1.fc16

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

5CVSS8.2AI score0.2318EPSS
Exploits1
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.17 views

Fedora Update for python-tornado FEDORA-2012-8194

Check for the Version of python-tornado OpenVAS Vulnerability Test Fedora Update for python-tornado FEDORA-2012-8194 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

5CVSS6.4AI score0.01362EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/06/01 12:0 a.m.18 views

Fedora Update for python-tornado FEDORA-2012-8217

Check for the Version of python-tornado OpenVAS Vulnerability Test Fedora Update for python-tornado FEDORA-2012-8217 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

5CVSS6.4AI score0.01362EPSS
Exploits0References2
Fedora
Fedora
added 2012/05/29 9:58 p.m.28 views

[SECURITY] Fedora 15 Update: python-tornado-2.2.1-1.fc15

Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...

5CVSS0.7AI score0.01362EPSS
Exploits0
Fedora
Fedora
added 2012/05/29 4:19 p.m.20 views

[SECURITY] Fedora 17 Update: python-tornado-2.2.1-1.fc17

Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...

5CVSS0.7AI score0.01362EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2012/05/21 4:42 p.m.4 views

tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

4.4CVSS6.1AI score0.00699EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2012/01/19 5:21 p.m.3 views

tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

4.4CVSS6.1AI score0.00699EPSS
Exploits1References4
Fedora
Fedora
added 2011/11/17 11:32 p.m.23 views

[SECURITY] Fedora 14 Update: squid-3.1.16-1.fc14

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

5CVSS8.8AI score0.38321EPSS
Exploits0
OpenVAS
OpenVAS
added 2011/09/12 12:0 a.m.9 views

Fedora Update for squid FEDORA-2011-11817

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2011-11817 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

7.4AI score
Exploits0References2
Fedora
Fedora
added 2011/09/08 7:6 a.m.13 views

[SECURITY] Fedora 15 Update: squid-3.1.15-1.fc15

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/06/20 12:0 a.m.45 views

Ubuntu 10.04 LTS / 10.10 / 11.04 : openjdk-6, openjdk-6b18 vulnerabilities (USN-1154-1)

It was discovered that a heap overflow in the AWT FileDialog.show method could allow an attacker to cause a denial of service through an application crash or possibly execute arbitrary code. CVE-2011-0815 It was dicovered that integer overflows in the JPEGImageReader readImage function and the...

10CVSS8.9AI score0.06277EPSS
Exploits0References12
Oracle linux
Oracle linux
added 2011/06/08 12:0 a.m.66 views

java-1.6.0-openjdk security update

1.6.0.0-1.39.1.9.8 - Resolves: rhbz709375 - Bumped to IcedTea6 1.9.8 - Copy fontconfig files to match names for current and next release - RH706250, S6213702, CVE-2011-0872: so non-blocking sockets with TCP urgent disabled get still selected for read ops win - RH706106, S6618658, CVE-2011-0865:...

10CVSS1.5AI score0.06277EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2011/03/11 12:35 a.m.5 views

tomcat: remote DoS via NIO connector

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...

5CVSS6.2AI score0.07885EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/03/09 8:48 p.m.5 views

tomcat: remote DoS via NIO connector

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...

5CVSS6.2AI score0.07885EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/03/09 8:48 p.m.55 views

Important: Red Hat Security Advisory: tomcat6 security and bug fix update

Updated tomcat6 packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

5CVSS6.1AI score0.2349EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.6 views

Fedora Update for squid FEDORA-2010-14149

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14149 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

7.4AI score
Exploits0References2
Rows per page
Query Builder