395 matches found
MDKA-2007:016 : gnome-terminal
A bug was causing incorrect window resizing when switching between multiple tabs in GNOME-Terminal. This bug, as well as memory leaks, has been fixed with this update. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...
DocuWiki With ImageMagick远程命令执行和拒绝服务漏洞
DocuWiki是一款基于web的WIKI程序。 DocuWiki存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务和命令执行攻击。 问题一是对图像的调整大小处理没有进行限制，可导致拒绝服务攻击。当libGD使用时（默认需要）必须先计算所需RAM，如果没有足够的RAM（一般8到20MB）给php进程使用，那么函数就会放弃。但是如果使用ImageMagick $conf'imconvert'使用时，没有限制存在，允许攻击者利用此特性消耗大量内存，造成拒绝服务攻击。...
CVE-2006-5098
lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service CPU consumption via large w and h parameters, when resizing an image...
DEBIAN-CVE-2006-5098
lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service CPU consumption via large w and h parameters, when resizing an image...
CVE-2006-5098
DokuWiki vulnerability CVE-2006-5098 affects lib/exec/fetch.php where remote attackers can cause a denial of service (high CPU usage) by passing very large w and h values during image resizing (before 2006-03-09e). The issue is tied to image resizing parameters and does not provide details on a p...
CVE-2006-5098
lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service CPU consumption via large w and h parameters, when resizing an image...
DokuWiki fetch.php Multiple Parameter imconvert Function Arbitrary Command Execution
The remote host is running DokuWiki, an open source wiki application written in PHP. The installed version of DokuWiki fails to properly sanitize input to the 'w' and 'h' parameters of the 'lib/exe/fetch.php' script before using it to execute a command when resizing images. An unauthenticated...
Debian DSA-289-1 : rinetd - incorrect memory resizing
Sam Hocevar discovered a security problem in rinetd, an IP connection redirection server. When the connection list is full, rinetd resizes the list in order to store the new incoming connection. However, this is done improperly, resulting in a denial of service and potentially execution of...
Vulnerability in rinetd
Sam Hocevar discovered a security problem in rinetd, an IP connection redirection server. When the server maintains 64 connections and the connection list is full, rinetd resizes the list in order to store the new incoming connection. However, this is done improperly, resulting in a denial of...
[SECURITY] [DSA 289-1] New rinetd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 289-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 289-1] New rinetd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 289-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...
DSA-289 rinetd - incorrect memory resizing
Bulletin has no description...
CVE-2000-0476
GNOME VTE before 0.76.3 allows a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476. Connected sources show this affects vte291 (TencentOS TencentOS Server 4 advisory) and is mirrored in Amazon Linux 2 advisories (ALAS2-2024-2610, ALAS-202...
