PT-2016-7754

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-31 Description An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations For versions prior to 0.5.3-31, update to...

PT-2016-7800

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-33 Description An issue was discovered that allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations For versions prior to 0.5.3-33,...

PT-2016-7753

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-31 Description An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, and possibly memory corruption via a crafted HTML page. Recommendations For versions...

PT-2016-7796

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-33 Description An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations For versions prior to 0.5.3-33, update to...

CVE-2016-9564

Boa Webserver 0.92r contains a buffer overflow in the send_redirect() function that can be triggered by a crafted HTTP GET request with a long URI composed only of '/' and '.' characters, leading to a denial-of-service condition. Multiple sources (NVD, CNVD, CVE records, and vendor write-ups) cor...

NTP 4.2.8p3 - Denial of Service

!/usr/bin/env python Exploit Title: ntpd 4.2.8p3 remote DoS Date: 2015-10-21 Bug Discovery: John D "Doug" Birdwell Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: http://support.ntp.org/bin/view/Main/NtpBug2922 Vendor Homepage: http://www.ntp.org/ Software Link:...

Denial of service

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID:...

pacemaker security update

CentOS Errata and Security Advisory CESA-2016:2578 An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

NTP 4.2.8p3 Denial Of Service

!/usr/bin/env python Exploit Title: ntpd 4.2.8p3 remote DoS Date: 2015-10-21 Bug Discovery: John D "Doug" Birdwell Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: http://support.ntp.org/bin/view/Main/NtpBug2922 Vendor Homepage: http://www.ntp.org/ Software Link:...

ntpd 4.2.7.p22 / 4.3.0 Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2016-7434 ntpd remote pre-auth Denial of Service +----------------------------------------------------------------------------------------------+ Affected: ntp-4.2.7p22, up to but not including ntp-4.2.8p9, and ntp-4.3.0 up to, but not including...

F5 BIG-IP - TMM vulnerability CVE-2016-7476

The Traffic Management Microkernel TMM may suffer from a memory leak while handling certain types of TCP traffic. CVE-2016-7476 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2016-7561

Name of the Vulnerable Software and Affected Versions Huawei S5300 versions V200R003C00 through V200R009C00 Huawei S5700 versions V200R001C00 through V200R009C00 Huawei S6300 versions V200R003C00 through V200R009C00 Huawei S6700 versions V200R001C00 through V200R009C00 Huawei S7700 versions...

PT-2016-6928

Name of the Vulnerable Software and Affected Versions Cisco ASR 5500 Series routers with Data Processing Card 2 DPC2 versions 18.0 through 21.0.0 Description A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers could allow an unauthenticated, remote attacker to cause a subs...

FreeBSD : FreeBSD -- OpenSSL Remote DoS vulnerability (0fcd3af0-a0fe-11e6-b1cf-14dae9d210b8)

Due to improper handling of alert packets, OpenSSL would consume an excessive amount of CPU time processing undefined alert messages. Impact : A remote attacker who can initiate handshakes with an OpenSSL based server can cause the server to consume a lot of computation power with very little...

FreeBSD-SA-16:35.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:35.openssl Security Advisory The FreeBSD Project Topic: OpenSSL Remote DoS vulnerability Category: contrib Module: openssl Announced: 2016-11-02 Affects:...

FreeBSD -- OpenSSL Remote DoS vulnerability

Problem Description: Due to improper handling of alert packets, OpenSSL would consume an excessive amount of CPU time processing undefined alert messages. Impact: A remote attacker who can initiate handshakes with an OpenSSL based server can cause the server to consume a lot of computation power...

CVE-2016-8875

The CVE-2016-8875 entry concerns Foxit Reader and Foxit PhantomPDF (Windows) with the ConvertToPDF plugin. When the gflags utility is enabled, a specially crafted TIFF image can trigger an out-of-bounds read, causing a DoS (crash) in CreateFXPDFConvertor. This is associated with the ConvertToPDF_...

Juniper Junos IPv6 Packet Handling Remote DoS (JSA10762)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the IPV6 implementation. An unauthenticated, remote attacker can exploit this, via a flood of specially crafted IPv6 traffic, to exhaust available...

SUSE SLES11 Security Update : xen (SUSE-SU-2016:2528-1) (Bunker Buster)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-7094: Buffer overflow in Xen allowed local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update bsc995792 - CVE-2016-7092: The getpagefroml3e...

PT-2017-2451

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.27 PHP versions 7.x prior to 7.0.12 Description The issue is related to a use-after-free vulnerability in the CURLFile implementation. This vulnerability can be exploited by remote attackers using crafted serialized...