Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. The deny-answer-aliases feature which is used to protect end users against DNS rebinding attacks is affected by an assertion failure in name.c, which would allow a remote attacker to crash the process...

Privilege Escalation

libbind9.so is vulnerable to privilege escalation. Due to an unquoted service path configuration of the BIND installer, a local Windows user is able to escalate privileges to Administrator. Successful exploitation of the vulnerability will require the lcoal attacker to have permissions to write a...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. An assertion failure occurs when a response, with records in an unusual order, is processed. This is due to a mistaken assumption on the ordering of CNAME or DNAME resource records, which would cause named to exit with the assertion failure...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service DoS attacks. The library contains a use-after-free bug in the fctxstoptimer function in the lib/dns/resolver.c file, allowing a malicious user to pass a DNS packet to cause an assertion failure and crash the application...

Out-of-Bounds Read

libapr-1.so is vulnerable to out-of-bounds read. A malicious user can pass a invalid month value to the aprtimeexp or the aprosexptime functions to cause an out-of-bounds read that can lead to sensitive information being disclosed or the application crashing...

Denial Of Service (DoS)

libtasn1.so is vulnerable to denial of service DoS. The attack exists because it allows a two-byte stack overflow while decoding DER encoded data in asn1derdecoding, leading to the DoS attack and possibly other attacks...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. An attacker is able to trigger an infinite recursion in lwresd and named using a non absolute name for getrrsetbyname that exceeds the maximum allowable length, resulting in a denial of service condition...

Denial Of Service (DoS) Through Heap Out-of-Bounds (OOB) Read

liblcms2.so is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap out-of-bound OOB read in TypeMLURead of cmstypes.c where the MLU bounds were not properly checked, causing the DoS attack...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the krb5gssprocesscontexttoken function of lib/gssapi/krb5/processcontexttoken.c where a terminated security-context handle could be used by authenticated users to cause a Denial of Service DoS attack...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the krb5encodekrbsecretkey function of plugins/kdb/ldap/libkdbldap/ldapprincipal2.c where authenticated users can cause DoS attacks through a series of cpw -keepold commands...

Local Privilege Escalation

libdbus-glib-1.so is vulnerable to local privilege escalation attacks. The vulnerability exists due to the improper filtering of the message sender value when the NameOwnerChanged signal is received, allowing privilege escalation attacks...

Denial Of Service (DoS) Through Out-of-Bounds Read

libtasn1.so is vulnerable to denial of service DoS attacks. The library contains multiple missing boundary checks, allowing a malicious user to pass ASN.1 input to cause an out-of-bounds read that can crash the application...

so-luz.com XSS vulnerability

Open Bug Bounty ID: OBB-719873 Description| Value ---|--- Affected Website:| so-luz.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. An attacker is able to create a denial of service condition using malicious input to cause an infinite loop in the function Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. An attacker is able to crash the process by entering a malicious input to the function Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp which results in a heap-based buffer over-read...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. An attacker is able to crash the process via a buffer over-read by sending a malicious input to the function Exiv2::tEXtToDataBuf in pngimage.cpp...

Denial Of Service (DoS)

libdbus-c++.so is vulnerable to denial of service. The expansion of internal XML entities in the Expat-based XML parser is not disabled and potentially allows a remote attacker to cause a denial of service condition via billion laughs attack...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A reachable assertion aborted in the function Exiv2::anonymous namespace::readHeader in bigtiffimage.cpp allows an attacker to cause a denial of service condition...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer over-read in the function Exiv2::IptcData::printStructure in src/iptc.cpp allows a remote attacker to cause a denial of service condition...

Denial Of Service (DoS)

libgstreamer-1.0.so is vulnerable to denial of service. An out-of-bounds heap read in the gstdatetimenewfromiso8601string function in gst/gstdatetime.c allows remote attackers to cause a denial of service condition via a malformed datetime string...