CVE-2017-2535: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Security" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service resource consumption via a crafted app...

CVE-2017-9059

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

CVE-2017-9059

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

CVE-2017-9059

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

CVE-2017-9059

The CVE-2017-9059 vulnerability affects the Linux kernel’s NFSv4 implementation (up to version 4.11.1). The root cause is an improper channel callback shutdown during unmount of an NFSv4 filesystem, described as a module reference and kernel daemon leak. Impact stated in the sources is a local de...

CVE-2017-9059

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

CVE-2017-9059

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

CVE-2017-9059: Improper Resource Shutdown or Release

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

PT-2017-3802

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2500 series firmware versions 3.0 or lower Moxa IOxpress configuration utility versions 2.3.0 or lower Description The issue is related to an uncontrolled resource consumption in the firmware of Moxa ioLogik 2542-HSPA modules and...

Siemens PROFINET DCP (Update V)

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable from an adjacent network/low attack complexity Vendor : Siemens Equipment : Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerabilities : Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory...

CVE-2017-1000359

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...

Weblate: No Password Length Restriction leads to Denial of Service

Hi Weblate, I am trying to register for an account when I came across a page where the password was required to be set up. The url is https://demo.weblate.org/accounts/password where the password was to be created after one provides his or her initial details. There is no limit to the length of t...

Design/Logic Flaw

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...

CVE-2017-1000359

CVE-2017-1000359 affects the OpenDaylight module odl-mdsal-xsql in OpenDaylight versions 3.3 and 4.0. The root cause is a resource management error that can cause a Java OutOfMemoryError and significant resource consumption, potentially leading to service disruption (DoS). No exploitation details...

PT-2017-10951

Name of the Vulnerable Software and Affected Versions OpenDaylight versions 3.3 through 4.0 Description The issue occurs when sending Port-Status packets to OpenDaylight, resulting in a DOMRpcImplementationNotAvailableException. This exception causes the controller to launch exceptions and consum...

CVE-2017-1000361: Undefined Security Weakness

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...

Cybozu Office CVE-2016-4871 DoS Vulnerability

Cybozu Office is prone to a denial of service DoS vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2017-10949

Name of the Vulnerable Software and Affected Versions OpenDaylight versions 3.3 through 4.0 Description The issue is related to a Java out of memory error and a significant increase in resource consumption. It affects the OpenDaylight odl-mdsal-xsql component. Recommendations For OpenDaylight...

CVE-2017-1000359: Uncontrolled Resource Consumption

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...

CVE-2017-1000357: Uncontrolled Resource Consumption

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 Lithium-SR3, 3.4 Lithium-SR4, 4.0...