PT-2016-7355 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to an off-by-one error in the magick/cache.c file of ImageMagick, which allows remote attackers to cause a denial of service, resulting in a segmentation fault. The...

PT-2018-5032 · Apache +1 · Apache Http Server Mod Cluster +1

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server mod cluster versions prior to 2.4.23 Description: The issue is related to an improper input validation in the protocol parsing logic of the load balancer, which can result in a segmentation fault in the serving httpd proces...

ObiHai ObiPhone 1032/1062 < 5-0-0-3497 - Multiple Vulnerabilities

ObiHai ObiPhone - Multiple Vulnerabilities ------------------------------------------ Introduction ============ Multiple vulnerabilities were discovered in the web management interface of the ObiHai ObiPhone products. The Vulnerabilities were discovered during a black box security assessment and...

Internet Bug Bounty: Heap overflow in curl_escape

I have founded a code block that leads to heap overflow. As you can see at : PHPFUNCTIONcurlescape char str = NULL, res = NULL; sizet strlen = 0; zval zid; phpcurl ch; SNIP if res = curleasyescapech-cp, str, strlen RETVALSTRINGres; curlfreeres; else RETURNFALSE; SNIP I do some analysis with...

Scientific Linux Security Update : php on SL7.x x86_64 (20160811) (httpoxy)

Security Fixes : - It was discovered that PHP did not properly protect against the HTTPPROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker- controlled proxy via a malicious HTTP request. CVE-2016-5385 Bug Fix...

MySQL 5.6.x < 5.6.32 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.6.x prior to 5.6.32. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the DML subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. CVE-2016-5612 - Multiple...

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

php security update

CentOS Errata and Security Advisory CESA-2016:1613 An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : php (RHSA-2016:1613) (httpoxy)

An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Moderate: Red Hat Security Advisory: php security and bug fix update

An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

php security and bug fix update

5.4.16-36.3 - don't set environmental variable based on user supplied Proxy request header CVE-2016-5385 5.4.16-36.2 - fix segmentation fault in headerregistercallback 1346758...

F5 BIG-IP - PHP vulnerability CVE-2015-8873

Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

F5 Networks BIG-IP : PHP vulnerability (K91084571)

Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls. CVE-2015-8873 C Tenable Network Security, Inc. The descriptive text and...

nrss reader 0.3.9 logic denial of service vulnerability

No description provided by source. Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: NRSS RSS Reader Version: 0.3.9-1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program descriptio...

swfstrings rfxswf.c file swf_GetU8 function debug code denial of service vulnerability

SWFTools is a collection of SWF manipulation and creation utility authoring software tools. swfstrings are text parsing tools. A debugging code denial of service vulnerability exists in swftools version 0.9.2 and swftools version 0.9.1. The vulnerability arises because the swfGetU8 function in th...

bind -- denial of service vulnerability

ISC reports: A query name which is too long can cause a segmentation fault in lwresd...

CVE-2016-5009

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

DEBIAN-CVE-2016-5009

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

Command injection

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

CVE-2016-5009

The CVE-2016-5009 issue affects Ceph where the handle_command function in mon/Monitor.cc could be triggered by an empty or crafted prefix, allowing a remote authenticated user to cause a denial of service (segmentation fault and monitor crash). The linked advisories (Red Hat RHSA-2016:1384, SUSE/...