PT-2015-4271

Name of the Vulnerable Software and Affected Versions libmspack version 0.4 Description The issue is caused by an integer overflow in the qtmd decompress function, which allows remote attackers to cause a denial of service via a crafted CAB file. This triggers an infinite loop. Recommendations Fo...

Openswan < 2.6.37 Cryptographic Helper Use-After-Free Remote DoS

The remote host is running a version of Openswan prior to version 2.6.37. It is, therefore, affected by a remote denial of service vulnerability due to a use-after-free flaw in the cryptographic helper handler. A remote attacker can exploit this issue to cause a denial of service. C Tenable Netwo...

PT-2017-6231

Name of the Vulnerable Software and Affected Versions Aircrack-ng versions prior to 1.2 Beta 3 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This is achieved through a response with a crafted length parameter. Recommendations For...

Juniper Junos MX Series BBE Routers jpppd Remote DoS (JSA10665)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Juniper PPP daemon jpppd. A remote attacker can exploit this issue by sending a specially crafted PAP Authenticate-Request after successful negotiation of the PPP...

CVE-2014-7924

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexeddb/indexeddbcallbacks.cc and...

Apache Traffic Server HTTP TRACE Request Remote DoS Vulnerability

Apache Traffic Server is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-8478: Improper Limitation of a Pathname to a Restricted Directory

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

PT-2015-3267

Name of the Vulnerable Software and Affected Versions International Components for Unicode ICU versions 52 through SVN revision 293126 Google Chrome versions prior to 40.0.2214.91 Description The issue is related to the collator implementation in the International Components for Unicode ICU...

PT-2015-3965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description A use-after-free issue exists in the Element::detach function within the DOM implementation in Blink. This could allow remote attackers to cause a denial of service or possibly have othe...

CVE-2014-5418: Uncontrolled Resource Consumption

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service resource consumption or reboot via crafted packets...

CVE-2014-6386: Undefined Security Weakness

Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial o...

CVE-2014-6385: Undefined Security Weakness

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows...

CVE-2014-8738

The bfdslurpextendednametable function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service invalid write, segmentation fault, and crash via a crafted extended name table in an archive...

CVE-2015-0591: Undefined Security Weakness

Cisco Unified Communications Domain Manager UCDM 10 allows remote attackers to cause a denial of service daemon hang and GUI outage via a flood of malformed TCP packets, aka Bug ID CSCur44177...

CVE-2014-8020: Undefined Security Weakness

Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service CPU consumption, and performance degradation or service outage via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276...

CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

CVE-2014-9221: Undefined Security Weakness

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

PT-2014-9062

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9.9 Description A logic error in the software allows remote attackers to cause a denial of service through resource consumption. Recommendations For version 6.8.9.9, update to a newer version that contains a fix for thi...

CVE-2011-4720: Improper Input Validation

Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service daemon crash via a long filename in a 1 RRQ or 2 WRQ operation...

CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream to the 1 A/52, 2 DTS, or 3 MPEG Audio decoder...