CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

CVE-2013-2686

CVE-2013-2686 affects Asterisk Open Source HTTP server: main/http.c does not properly restrict Content-Length, enabling stack-consumption DoS via crafted HTTP POST. Affected: Asterisk 1.8.x before 1.8.20.2; 10.x before 10.12.2; 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; As...

CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

CVE-2013-2686: Improper Restriction of Operations within the Bounds of a Memory Buffer

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

PT-2013-3872

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 1.8.20.1 Asterisk Open Source versions 10.x through 10.12.1 Asterisk Open Source versions 11.x through 11.2.1 Certified Asterisk version 1.8.15 through 1.8.15-cert1 Asterisk Digiumphones versions...

CVE-2012-5976

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial o...

Stack overflow

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial o...

CVE-2012-5976: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial o...

Wireshark CLDAP Dissector Denial of Service (CVE-2011-1140)

Multiple stack consumption vulnerabilities have been reported in Wireshark...

CVE-2012-3819

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service daemon crash via a long request...

Design/Logic Flaw

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service daemon crash via a long request...

CVE-2012-3819

The CVE-2012-3819 entry describes a Stack Overflow/Resource exhaustion vulnerability in DartWebserver.dll version 1.9 and earlier, used by Dart PowerTCP WebServer for ActiveX and related products. The root cause is improper handling of very large HTTP requests: during request parsing, the server ...

CVE-2012-3819: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service daemon crash via a long request...

PT-2012-5021

Name of the Vulnerable Software and Affected Versions Dart PowerTCP WebServer for ActiveX versions 1.9 and earlier Description The issue is related to a stack consumption vulnerability in the dartwebserver.dll, which can be exploited by remote attackers to cause a denial of service. This is...

Wireshark Denial of Service Vulnerability-01 (Mar 2011) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark Denial of Service Vulnerability-01 March 11 (Mac OS X)

The host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvuln01mar11macosx.nasl 5977 2017-04-19 09:02:22Z teissa $ Wireshark Denial of Service Vulnerability-01 March 11 Mac OS X Authors: Madhuri D Copyright: Copyright c 20...

Wireshark BER Dissector Stack Consumption Vulnerability - Mac OS X

Wireshark is prone to stack consumption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...

CVE-2012-1985

Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...