Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer overflow in the tiff parser allows an attacker to crash the application, or potentially execute arbitrary code...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. The attack is possible because it does not handle a NULL return from the functions strchr or strstr if a malicious server provides a string without a space character or without a blank line, crashing the application due to null pointer dereferen...

[SECURITY] [DLA 1823-1] linux security update

Package : linux Version : 3.16.68-2 CVE ID : CVE-2019-3846 CVE-2019-5489 CVE-2019-10126 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11810 CVE-2019-11833 CVE-2019-11884 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service DoS. The attack exists because it allows establishment of simultaneous TCP client connections, resulting in exhaustion of resources for network and management of pool of files such as logs, descriptor files, zone journal files etc...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190423)

Security Fixes : - Kernel: KVM: potential use-after-free via kvmioctlcreatedevice CVE-2019-6974 - Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer CVE-2019-7221 Bug Fixes : - rbd: avoid corruption on partially completed bios rhel-7.6.z - xfsvmwritepages deadl...

Design/Logic Flaw

Incorrect Access Controls of Security Officer SO in PKCS11 R2 provider that ships with the Utimaco CryptoServer HSM product package allows an SO authenticated to a slot to retrieve attributes of keys marked as private keys in external key storage, and also delete keys marked as private keys in...

CVE-2018-19589

The CVE-2018-19589 describes incorrect access controls in the PKCS11 R2 provider shipping with Utimaco CryptoServer HSM. An SO authenticated to a slot can retrieve attributes of keys marked as private in external key storage and can delete such keys, potentially compromising availability of all e...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The CVE-2019-10654 issue concerns Long Range ZIP (lrzip) 0.631 using liblzo2.so.2 (LZO 2.10). The vulnerable component is lzo1x_decompress; a crafted archive can trigger an invalid memory read leading to denial of service (application crash). This is tied to the same lrzip vulnerability family as...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds write by sending multiple malicious keyboard interactive response messages whose total length is greater than the maximum characters for unsigned char...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds memory comparison by sending a malicious SSHMSGCHANNELREQUEST packet with an exit status message and no payload...

Out Of Bounds Read

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process by sending malicious SSH packet with a padding length value greater than the packet length, which would result in an out-of-bounds read when the packet is decompressed...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds read by sending malicious response packet to various commands such as the sha1 and sha226 key exchange, user auth list, user auth password, public key auth etc...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server could send a SSHMSGCHANNELREQUEST packet with an exit signal message having a length of maximum unsigned integer value. This results in a length value of 1, which would cause a memory write out of bounds error or zero byte allocati...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. An integer overflow in the keyboard interactive handling allows a malicious server to crash the process resulted from an unchecked integer that leads to an out-of-bounds write error...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists through an infinite recursion at Exiv2::Image::printTiffStructure in image.cpp when processing a malicious file, resulting in a denial of service condition...