273 matches found
DEBIAN-CVE-2014-3619
The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...
UBUNTU-CVE-2014-3619
The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...
CVE-2014-3619
The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...
PT-2015-3728 · Red Hat +1 · Glusterfs +1
Name of the Vulnerable Software and Affected Versions: GlusterFS version 3.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This is achieved by sending a specific fragment header, "00000000", to the socket proto state machine function...
glusterfs: fragment header infinite loop DoS
A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...
glusterfs: fragment header infinite loop DoS
A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...
Debian DSA-2903-1 : strongswan - security update
An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...
Debian Security Advisory DSA 2903-1 (strongswan - security update)
An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...
DSA-2903-1 strongswan - security update
Bulletin has no description...
Nginx 0.6.38 - Heap Corruption
Nginx 0.6.38 - Heap Corruption !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: offset At that point, merely dump the r; capture the value for the data pointer it'll be the one wit...
security flaw
Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service server crash via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module...
[Full-disclosure] Cisco PIX embryonic state machine 1b data DoS
Arhont Ltd - Information Security Arhont Advisory by: Konstantin V. Gavrilenko http://www.arhont.com http://www.hackingciscoexposed.com Arhont ref: arh200601-1 Advisory: Cisco PIX embryonic state machine 1b data DoS Class: design bug? Version: Tested on PIX535, PIX OS ver 6.34 Tested on PIX515E,...