Code injection

imagemagick 6.8.9.6 has remote DOS via infinite loop...

CVE-2014-8561

CVE-2014-8561 affects ImageMagick 6.8.9.6 with a remote denial-of-service via an infinite loop. The connected documents confirm the DoS impact, but do not provide explicit root-cause details, affected product variants beyond 6.8.9.6, or any remediation (patch/version) information. Documented expl...

CVE-2014-8561

imagemagick 6.8.9.6 has remote DOS via infinite loop...

CVE-2014-8561

imagemagick 6.8.9.6 has remote DOS via infinite loop...

CVE-2019-19307

An integer overflow in parsemqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS infinite loop, or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet...

DEBIAN-CVE-2019-19307

An integer overflow in parsemqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS infinite loop, or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet...

Integer overflow

An integer overflow in parsemqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS infinite loop, or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet...

CVE-2019-19307

An integer overflow in parsemqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS infinite loop, or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet...

CVE-2019-19307

CVE-2019-19307 affects Cesanta Mongoose 6.16. The vulnerability is an integer overflow in the parse_mqtt function in mongoose.c that can be triggered by a crafted MQTT protocol packet, leading to remote denial of service (infinite loop) and possibly an out-of-bounds write. Reports from multiple s...

CVE-2018-19162

Divi through 4.0.5 a chain-based proof-of-stake cryptocurrency allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk...

Code injection

navcoin through 4.3.0 a chain-based proof-of-stake cryptocurrency allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM...

CVE-2013-4100

Cryptocat before 2.0.22 has Remote Denial of Service via username...

CVE-2019-18217

ProFTPD vulnerability CVE-2019-18217 causes remote unauthenticated Denial of Service due to improper handling of overly long commands, leading a child process to enter an infinite loop in main.c. Affected versions include 1.3.6b and 1.3.7rc before 1.3.7rc2; exploitation could impact availability ...

SUSE-SU-2019:14191-1 Security update for tcpdump

This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2017-12995: Fixed an infinite loop in the DNS parser that allowed remote DoS bsc1057247. - CVE-2017-12893: Fixed a buffer over-read in the SMB/CIFS parser that allowed remote DoS bsc1057247. - CVE-2017-12894: Fixed a...

CVE-2009-1270

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service infinite loop via a crafted TAR file that causes 1 clamd and 2 clamscan to hang...

CVE-2019-12693

A vulnerability in the Secure Copy SCP feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the use of an incorrect data type for a length variable. An attacker could exploit...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2414-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented : jscSLE-4875: CML New device IDs for CML jscSLE-7294: Add cpufreq driver for Raspberry Pi fate321840: Reduce memory required to boot capture kernel while using...

Amazon Linux AMI : kernel (ALAS-2019-1281)

A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream 'x86/ptrace: Fix possible spectre-v1 in ptracegetdebugreg' commit reintroduced the...

Medium: kernel

Issue Overview: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptracegetdebugreg" commit...

CVE-2019-15538

An issue was discovered in xfssetattrnonsize in fs/xfs/xfsiops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfssetattrnonsize is failing to unlock the ILOCK after the xfsqmvopchownreserve call fails. This is primarily a local...