4388 matches found
SUSE-SU-2015:0679-1 Security update for tcpdump
tcpdump was updated to fix five vulnerabilities in protocol printers When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities were fixed: IPv6 mobili...
CVE-2015-0654
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...
PT-2015-5870
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.0i Description The issue allows remote attackers to cause a denial of service stack corruption and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF." Recommendations For versions...
PT-2015-5869
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.0i Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted sector in a workbook. Recommendations For versions prior to 1.0.0i, update to version...
FreeBSD : rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities (d08f6002-c588-11e4-8495-6805ca0b3d42)
Best Practical reports : RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...
CVE-2015-2190
epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet that is improperly handled by the LLDP dissector...
CVE-2015-2177: Improper Input Validation
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
CVE-2015-0885: Undefined Security Weakness
checkpw 1.02 and earlier allows remote attackers to cause a denial of service infinite loop via a -- dash dash in a username...
CVE-2015-0632: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...
PT-2015-4771
Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS devices affected versions not specified Description A race condition exists in the SSL implementation, allowing remote attackers to cause a denial of service by making many management-interface HTTPS...
PT-2015-4761
Name of the Vulnerable Software and Affected Versions Cisco ASR 5500 System Architecture Evolution SAE Gateway devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and SNMP outage, by sending malformed SNM...
CVE-2015-0621: Undefined Security Weakness
Cisco TelePresence MCU devices with software 4.51.45 allow remote attackers to cause a denial of service device reload via an unspecified series of TCP packets, aka Bug ID CSCur50347...
CVE-2015-0593: Undefined Security Weakness
The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...
CVE-2015-1545
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...
MatrikonOPC Server for DNP3 < 1.2.3.1 Message Handling Remote DoS
Binary data scadamatrikonopcdnp3serverdos.nbin...
CVE-2014-9667
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...
CVE-2014-9661
type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted Type42 font...
CVE-2015-0600: Improper Input Validation
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to cause a denial of service logoff via crafted packets, aka Bug ID CSCuq12139...
CVE-2015-1463
CVE-2015-1463 affects ClamAV prior to 0.98.6. A remote attacker can crash the daemon by feeding a specially crafted petite packer file, due to an issue described as an “incorrect compiler optimization.” The vulnerability is demonstrated in the CVE entry for ClamAV, and several advisories referenc...