CVE-2011-2749

CVE-2011-2749 affects the ISC DHCP server in 3.x and 4.x (before 4.2.2, 3.1-ESV-R3, and 4.1-ESV-R3). A crafted BOOTP packet allows remote attackers to cause a denial of service (daemon exit). The connected advisories confirm the same impact for CVE-2011-2748 as well, and multiple distributions re...

CVE-2011-2749: Improper Input Validation

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service daemon exit via a crafted BOOTP packet...

CVE-2011-2975: Undefined Security Weakness

Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service application crash or have unspecified other impact via crafted mapfile data...

ICQ 7.5 Software - Remote Denial of Service Vulnerability

Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...

CVE-2011-2887: Undefined Security Weakness

IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service application crash via a certain sample document...

SuSE 11.1 Security Update : libapr (SAT Patch Number 4845)

This update fixes the following security issues : - 650435: remote DoS in APR. CVE-2010-1623 - 693778: unconstrained recursion when processing patterns CVE-2011-0419 / CVE-2011-1928 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 10 Security Update : libapr (ZYPP Patch Number 7611)

This update fixes the following security issues : - 650435: remote DoS in APR. CVE-2010-1623 - 693778: unconstrained recursion when processing patterns. CVE-2011-0419 / CVE-2011-1928 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

ISC BIND 9 Unspecified Packet Processing Remote DoS

Binary data 5982.prm...

ISC BIND Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability. If an attacker sends a specially crafted request to a BIND server that has recursion enabled and Response Policy Zones RPZ configured, it may cause the name...

ISC BIND 9 Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS

Binary data 5981.prm...

FreeBSD : BIND -- Remote DoS against authoritative and recursive servers (fd64188d-a71d-11e0-89b4-001ec9578670)

ISC reports : A defect in the affected BIND 9 versions allows an attacker to remotely cause the 'named' process to exit using a specially crafted packet. This defect affects both recursive and authoritative servers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : BIND -- Remote DoS with certain RPZ configurations (4ccee784-a721-11e0-89b4-001ec9578670)

ISC reports : Two defects were discovered in ISC's BIND 9.8 code. These defects only affect BIND 9.8 servers which have recursion enabled and which use a specific feature of the software known as Response Policy Zones RPZ and where the RPZ zone contains a specific rule/action pattern. %NASLMINLEV...

BIND -- Remote DoS against authoritative and recursive servers

ISC reports: A defect in the affected BIND 9 versions allows an attacker to remotely cause the "named" process to exit using a specially crafted packet. This defect affects both recursive and authoritative servers...

CVE-2011-2641: Undefined Security Weakness

Opera 11.11 allows remote attackers to cause a denial of service application crash by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value...

CVE-2011-2618: Undefined Security Weakness

Opera before 11.50 allows remote attackers to cause a denial of service application crash via web script that moves a 1 AUDIO element or 2 VIDEO element between windows...

CVE-2011-2636: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by a certain Tomato Firmware page...

CVE-2011-2619: Undefined Security Weakness

Opera before 11.50 allows remote attackers to cause a denial of service application crash via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets CSS...

CVE-2011-2188: Undefined Security Weakness

LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

CVE-2011-1956: Undefined Security Weakness

The bytesreprlen function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via arbitrary TCP traffic...

CVE-2011-0943: Undefined Security Weakness

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...