CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

The vulnerability of the opj_t1_clbl_decode_processor function (openjp2/t1.c) in the OpenJPEG image encoding and decoding library, which allows a hacker to trigger a service failure.

The vulnerability of the opjt1clbldecodeprocessor function in the OpenJPEG image encoding and decoding library is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability in the vManage web interface of the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the CERM Crypto Export Restrictions Manager implementation in the RouterOS operating system of MikroTik allows a perpetrator to trigger a service failure.

The vulnerability of the CERM Crypto Export Restrictions Manager implementation in the RouterOS operating system of MikroTik relates to the uncontrolled use of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...

The vulnerability of microprogramming software for managing video cards (motherboards) in hypervisors such as VMware ESXi, VMware Workstation, and VMware Fusion allows attackers to cause partial service interruptions.

The vulnerability of microprogramming software for managing video cards controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a partial service...

The vulnerability of the CMS parser for OpenSSL structures allows a hacker to induce a service failure.

The vulnerability of CMS parsers in OpenSSL libraries is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the OpenSSL library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Flexible NetFlow operating system tool in Cisco IOS XE allows a attacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s Flexible NetFlow tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Locally Significant Certificate (LSC) management mechanism in the Cisco IOS XE operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Locally Significant Certificate LSC management mechanism in the Cisco IOS XE operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the GSUP discapper of the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the GSUP scanner, a traffic analysis tool for computer networks developed by Wireshark, is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the TSDNS discriver and the traffic analyzer for computer networks, Wireshark, allows a hacker to cause a service failure.

The vulnerability of the TSDNS discoverer and the Wireshark traffic analyzer in computer networks is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SSH Secure Shell server of the Cisco IOS operating system, which allows a hacker to trigger a maintenance failure.

The vulnerability of the Cisco IOS operating system’s Secure Shell server is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the disct_gssapi_work function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the disctgssapiwork function in the Wireshark network traffic analyzer program is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the OSPF implementation in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations in Cisco Firepower Threat Defense’s microprogramming-based network interface controllers allows attackers to induce service failures.

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability could allow...

The vulnerability of the WriteTGAImage function in the GraphicsMagick graphics editor allows an attacker to cause a service failure by causing the operation to exceed the buffer limits in memory.

The vulnerability of the WriteTGAImage function in the GraphicsMagick graphics editor is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by using a specially created image file...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to a memory management flaw after memory is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library, related to the lack of mechanisms for controlling the system’s resources, allows a malicious actor to cause service failures.

The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library is related to the lack of mechanisms for controlling the resources used by the system. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the libarchive library, related to reading beyond the buffer boundaries of memory, allows a hacker to cause a service failure.

The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created archive...