K19501795: BIG-IP HTTP profile vulnerability CVE-2019-6631

Security Advisory Description iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs. CVE-2019-6631 Impact The...

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

SUSE CVE-2015-0830

The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service application crash via crafted WebGL content...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved and Junos operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the dcpfe component in Juniper Networks’ Junos operating systems allows a hacker to induce a service failure.

The vulnerability of the dcpfe component in Juniper Networks’ Junos operating systems arises due to buffer overflows in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by triggering a malfunction of the dcpfe process...

The vulnerability of Juniper Networks Junos OS’s kernel allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS kernel is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the InnoDB component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the NVME driver (drivers/nvme/target/auth.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the NVME driver drivers/nvme/target/auth.c in the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the FortiSandbox threat detection and removal system, as well as the FortiAuthenticator identification system, is related to an uncontrolled resource consumption, allowing attackers to trigger a service failure.

The vulnerability of the FortiSandbox threat detection and removal system, as well as the FortiAuthenticator identification system, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger service interruptions...

The vulnerability of the Link Layer Discovery Protocol implementation in the microprogrammed software of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the microsoftware of Cisco Analog Telephone Adapter ATA series 190 devices is related to the lack of checks for header field lengths during the processing of LLDP packets. Exploiting this vulnerability can allow a...

Vulnerability of the intr_callback() function (drivers/net/usb/r8152.c) in Linux operating system kernels, allowing a hacker to cause a service failure

The vulnerability of the intrcallback function drivers/net/usb/r8152.c in Linux operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of network connection tools such as Intel PROSet/Wireless WiFi, Intel vPro CSME WiFi, and Killer WiFi allows a malicious actor to cause service interruptions.

The vulnerability of network connection tools such as Intel PROSet/Wireless WiFi, Intel vPro CSME WiFi, and Killer WiFi is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of Windows operating system kernels is related to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the implementation of the AAA TACACS+ protocol in the Brocade Fabric OS operating system allows a intruder to trigger a service failure.

The vulnerability of the aaa tacacs+ protocol implementation in the Brocade Fabric OS operating system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the HTTP/3 network protocol implementation in Microsoft Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the HTTP/3 network protocol implementation in Microsoft Windows systems is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the SSL-VPN portal for operating systems FortiOS and the proxy server used for protecting against internet attacks by FortiProxy allows attackers to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems and the FortiProxy proxy server used to protect against internet attacks is related to access to an uninitialized pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending a...

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the PAC parameters (Privileged Attribute Certificate) in the krb5_parse_pac function of Heimdal and MIT Kerberos, a network interaction program for Samba, allows a perpetrator to trigger a service failure.

The vulnerability of the PAC Privileged Attribute Certificate parameters in the krb5parsepac function of Heimdal and MIT Kerberos, as well as in Samba’s network interaction programs, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service...