CVE-2016-7427: Uncontrolled Resource Consumption

The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet...

PT-2017-7842

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, potentially leading to a heap-based buffer overflow, via a crafted TIFF image. This is related to a "WRITE of size 2048" in the libtiff/tif next....

CVE-2016-9131

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via a malformed response to an RTYPE ANY query...

CVE-2017-0390: Undefined Security Weakness

A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0,...

PT-2017-1042

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 Description The issue is related to insufficient access control in the Telephony service of the Android operating system. It may allow a remote attacker to cause a device to hang or reboot....

PT-2017-1041

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 Description The issue is related to resource management errors in the media server service of the Android operating system. It may allow a remote attacker to cause a device hang or reboot...

PT-2017-1092

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18 Description The issue is related to resource management errors in the Qualcomm FUSE file system of the Android operating system. It allows a remote attacker to use a specially crafted file to...

PT-2017-16440

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.3.26 GnuTLS versions 3.5.x prior to 3.5.8 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-memory error and crash, via a crafted OpenPGP certificate. Recommendations...

PT-2017-10112

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the jas seq2d create function in jas seq.c...

CVE-2016-9138

PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::toString with DateInterval::wakeup...

PT-2016-3100

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions prior to 2.2.4 Description The issue is caused by an integer overflow in the gd io.c component of the GD Graphics Library. This can be exploited by a remote attacker to potentially cause undefined impact by...

Apache Struts 2.5.x < 2.5.13 URLValidator Form Field Handling Remote DoS (S2-044)

The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.13. It is, therefore, affected by a denial of service vulnerability in the URLValidator class due to improper handling of user-supplied input to the form field. An unauthenticated, remote attacker can exploit this, via ...

CVE-2016-6712

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

CVE-2016-6711

CVE-2016-6711 affects Android's Mediaserver libvpx component. A remote DoS can be triggered by a specially crafted file, causing device hang or reboot. Affected Android versions: 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01. No remediation details are provid...

CVE-2016-6491

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service out-of-bounds read, memory leak, and crash via a crafted image...

CVE-2016-6711: Improper Input Validation

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

CVE-2016-9423

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9429

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9625

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

CVE-2016-9432

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service memory corruption, segmentation fault, and crash via a crafted HTML page...