887 matches found
Design/Logic Flaw
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue...
CVE-2015-2318
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue...
CVE-2015-2318
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue...
DEBIAN-CVE-2017-17819
In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...
PT-2017-15024
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to an illegal address access in the find cc function located in asm/preproc.c. This access can lead to a remote denial of service attack. The cause is attributed to the la...
PT-2017-3660
Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to the default build configuration of deviceprogrammer in BOOT.BF.3.0, which enables the flag SKIP SECBOOT CHECK NOT RECOMMENDED BY QUALCOMM. This...
thrift: Infinite recursion via vectors involving the skip function
A vulnerability was discovered in Apache Thrift client libraries that allows remote, authenticated attackers to cause an infinite recursion via vectors involving the skip function; resulting in a denial of service DoS condition...
How to Remove the "Skip Check" Option from Post-Authentication and nfactor EPA Scans
This article describes how to remove the "Skip Check" option from EPA.HTML on post-authentication NetScaler Gateway EPA scan. The solution in this article is meant for X1, Default, GreenBubble and RfWebUI portal themes...
thrift: Infinite recursion via vectors involving the skip function
A vulnerability was discovered in Apache Thrift client libraries that allows remote, authenticated attackers to cause an infinite recursion via vectors involving the skip function; resulting in a denial of service DoS condition...
Apache Thrift Client Library Denial of Service Vulnerability
Apache Thrift is an interface definition language and binary communication protocol for defining and creating services for multiple languages. The Apache Thrift client inventory is vulnerable to a denial of service. A remote authenticated user can cause a denial of service infinite recursion via ...
CVE-2015-3254
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2015-3254
Removed by vendor...
CVE-2015-3254: Improper Input Validation
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
PT-2017-6654
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.9.3 Description The issue allows remote authenticated users to cause a denial of service, specifically through infinite recursion, by exploiting vectors related to the skip function. Recommendations For versio...
Fedora 24 : sane-backends (2017-0f5fe1913f)
CVE-2017-6318 sane-backends: SANENETCONTROLOPTION response packet may contain memory contents of the server fedora-all ---- This update adds the 'skip-adf' option to the avision driver. This let users work around problems on HP ScanJet 82xx/83xx scanners with no automatic document feeder attached...
PT-2017-18696
Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.1 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a crafted image. This is due to a problem in the my skip input data fn function in imagew-jpeg....
Underbit libmad 'mad_bit_skip' function denial of service vulnerability
MAD libmad is a high quality MPEG audio decoder. A denial of service vulnerability exists in the madbitskip function in bit.c in Underbit MAD. A remote attacker could use this vulnerability to cause a denial of service buffer overflow and application crash via a specially designed audio file...
UBUNTU-CVE-2017-8374
The madbitskip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...
PT-2017-3721
Name of the Vulnerable Software and Affected Versions: Libmad version 0.15.1b Description: The issue is related to the mad bit skip function in the bit.c file of the Libmad MPEG audio decoder, which can cause a heap-based buffer over-read and application crash when processing a specially crafted...
DEBIAN-CVE-2016-9635
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a 'skip count' that goes beyond initialized buffer...