4546 matches found
CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
CVE-2017-7395
In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...
UBUNTU-CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
CVE-2017-7395
In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...
CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
UBUNTU-CVE-2017-7395
In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...
CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
CVE-2017-7395
In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server...
CVE-2017-7394
TigerVNC vulnerability CVE-2017-7394 affects TigerVNC 1.7.1: SSecurityPlain::processMsg allows unauthenticated users to crash the server by sending long usernames. The linked Nessus/Gentoo/EulerOS entries confirm this CVE among other TigerVNC issues, with impact described as a denial of service v...
CVE-2015-8762
The CVE-2015-8762 entry concerns the EAP-PWD module in FreeRADIUS versions 3.0 through 3.0.8. The vulnerability allows remote attackers to cause a denial of service via a zero-length EAP-PWD packet, triggering a NULL pointer dereference that can crash the server. Connected sources consistently re...
NTP Local Stack Buffer Overflow Vulnerability
Network Time Protocol NTP is a protocol used to synchronize computer time. NTP suffers from a local stack buffer overflow vulnerability, where an attacker can cause a stack buffer overflow by sending a constructed response to a malicious server, resulting in a crash or arbitrary code execution...
spice: Remote DoS via crafted message
A vulnerability was discovered in SPICE in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash...
spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages
A vulnerability was discovered in SPICE in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution...
Insufficient Error Handling
Overview Affected versions of http-proxy are vulnerable to a denial of service attack, wherein an attacker can force an error which will cause the server to crash. Recommendation Update to version 0.7.0 or later. References - PR 101 - GitHub Advisory...
TP-Link C2 and C20i Denial of Service Vulnerability
TP-Link is a Chinese manufacturer of network equipment such as routers and IOT devices. A denial of service vulnerability exists in TP-Link C2 and C20i. An attacker can exploit the vulnerability to cause a denial of service by sending an HTTP request to the affected device, crashing the HTTP serv...
DEBIAN-CVE-2016-6173
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
