3770 matches found
CVE-2016-4450
os/unix/ngxfiles.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a crafted request, involving writing a client request body to a temporary file...
PT-2016-4739
Name of the Vulnerable Software and Affected Versions Cisco Prime Network Analysis Module NAM versions prior to 6.21-b Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and monitoring outage, by sending crafted IPv6 packets. This is due to a...
MGASA-2016-0216 Updated nginx packages fix CVE-2016-4450
Updated nginx package fixes security vulnerability: A problem was identified in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while writing client request body to a...
Updated nginx packages fix CVE-2016-4450
Updated nginx package fixes security vulnerability: A problem was identified in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while writing client request body to a...
CVE-2016-5238
The getcmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via vectors related to reading from the information transfer buffer in non-DMA mode...
CVE-2016-4453
The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via a VGA command...
Command injection
The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via a VGA command...
CVE-2016-4453
Technical details for CVE-2016-4453 are not publicly provided in the connected documents. The description notes a QEMU vmsvga issue, but no vendor/product/version specifics or fix are included here. Monitor for updates.
CVE-2016-4453
The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via a VGA command...
PT-2016-3355
Name of the Vulnerable Software and Affected Versions nginx versions 1.10.0 through 1.10.1 nginx versions 1.11.x before 1.11.1 Description The issue is related to a NULL pointer dereference in the os/unix/ngx files.c component of the nginx platform. This can be exploited by a remote attacker to...
CVE-2016-4555
A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process...
DSA-3573-1 qemu - security update
Bulletin has no description...
CVE-2016-3712
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash by editing VGA registers in VBE mode...
mod_auth_mellon denial of service vulnerability (CNVD-2016-02440)
modauthmellon is an Apache module that provides simple SAML Security Assertion Markup Language 2.0 services. A denial of service vulnerability exists in the amreadpostdata function in versions of modauthmellon prior to 0.11.1, which can be exploited by a remote attacker to cause a denial of servi...
CVE-2016-2145
The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...
CVE-2016-2145
The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...
CVE-2016-2146
The amreadpostdata function in modauthmellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service worker process crash, web server deadlock, or memory consumption via a large amount of POST data...
CVE-2016-2145
The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...
PT-2016-5027
Name of the Vulnerable Software and Affected Versions mod auth mellon versions prior to 0.11.1 Description The issue is related to the am read post data function, which fails to check for errors returned by the ap get client block function. This oversight allows remote attackers to craft maliciou...
