Code injection

In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

The vulnerability of the archive_wstring_append_from_mbs function in the libarchive library, which allows a hacker to cause a service failure.

The vulnerability of the archivewstringappendfrommbs function in the libarchive library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions using a specially created archive...

The vulnerability of CoAP decoders in Wireshark’s computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of CoAP decoders wireshark/menagerie/menagerie/16122-unittest.pcapng, a traffic analyzer for computer networks in Wireshark, is related to incorrect checking of the data volume sent in the PIV format. Exploiting this vulnerability can allow an attacker operating remotely to caus...

The vulnerability of Firefox browser, related to resource release errors, allows attackers to trigger a service failure.

The vulnerability of the Audio Buffer component in the Firefox browser is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted web page...

The vulnerability of the parse_group_prop_ntr_selection_method method in the Open vSwitch software multi-level switch allows a attacker to cause a service failure.

The vulnerability of the parsegrouppropntrselectionmethod method lib/ofp-util.c in the Open vSwitch OvS software multi-level switch exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

Vulnerability of the Server component: The RBR component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The RBR component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

The vulnerability of the Sound component in Oracle Java SE, Java SE Embedded, and JRockit software platforms allows attackers to trigger a service failure.

The vulnerability of the Sound component in Oracle Java SE, Java SE Embedded, and JRockit software platforms is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability in the multimedia streaming recording mechanism of Firefox browsers, Firefox ESR, and Thunderbird email software, related to improper type checking of data sources, allows attackers to trigger a service failure.

The vulnerability of the multimedia streaming recording mechanism in Firefox web browsers, Firefox ESR, and the Thunderbird email program relates to the issue of recording data as incorrect types. Exploiting this vulnerability allows an attacker to cause service interruptions by changing the type...

The vulnerability of Samba software on the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of Samba software on the Astra Linux operating system is related to the absence of the necessary privilege PARSECCAPSIG for the smbd process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions. source-iocs-preserved const=PARSECCAPSIG...

The vulnerability of theDAQ software protection component of Cisco Firepower Threat Defense allows a intruder to trigger a service failure.

The vulnerability of the Cisco Firepower Threat Defense software’sDAQ component exists due to errors in resource management during traffic inspection. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Cisco ASR 900 router microprogramming software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of Cisco ASR 900 microprogrammed software lies in the uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause partial service interruptions by sending a large number of broadcast packets to the vulnerable device...

The vulnerability of the Administration component of the Oracle GlassFish Server allows a attacker to cause a service failure.

The vulnerability of the Administration component of Oracle GlassFish Server is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

The vulnerability of the SIP inspection component of the microprogramming software used in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to trigger service interruptions.

The vulnerability of the SIP inspection component in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD arises due to errors in processing SIP traffic. Exploiting this vulnerability can allow an attacker to induce...

The vulnerability of the memcached data caching software, related to integer overflows, allows attackers to cause service interruptions.

The vulnerability of the memcached data caching software is related to integer overflows. Exploitation of this vulnerability can occur remotely, leading to resource leaks, data corruption, blocking, or unexpected system shutdowns...

The vulnerability of the driver of the cryptographic accelerator for microprogrammed network interface devices in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.

The vulnerability of the driver for the cryptographic accelerator of the microprogramming software-based network interface devices Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could...

The vulnerability of the RSLinx Classic communication server, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

The vulnerability of the RSLinx Classic communication server is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted Ethernet/IP packets to port 44818...

Vulnerability of the Server component: The Parser component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server:Parser component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...