glibc: denial of service

It was found that the files backend of Name Service Switch NSS did not isolate iteration over an entire database from key-based look-up API calls. An application performing look-ups on a database while iterating over it could enter an infinite loop, leading to a denial of service...

WordPress Welcart Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress's Welcart e-Commerce plugin version 1.3.12 in the implementation of the SQL injection vulnerability, remote attacke...

USBkill - Anti-Forensic Kill-Switch that waits for a change on your USB ports

USBkill is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py Why? Some reasons to use this tool: In case the police or other thugs come busting in or steal your laptop from you when you are at a...

GarrettCom Magnum 6K and 10K Switches Local Security Bypass Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in GarrettCom Magnum 6K and 10K Switches that allows a local attacker to bypass security restrictions and perform unauthorized operations...

GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...

The vulnerability of Siemens Ruggedcom WIN52 microprogramming software allows a intruder to gain access to the switch with administrator privileges.

The vulnerability of Siemens Ruggedcom WIN52 microprogramming software may allow a malicious actor to bypass authentication procedures when using remote control services and gain access to the switch with administrator privileges...

HTTP Response Splitting Vulnerability in Multiple IBM Flex System Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A security vulnerability exists in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches due to the...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gdm-user-switch-applet-2.30.4 package of the Red Hat Enterprise Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

Amazon Linux AMI : 389-ds-base (ALAS-2015-501)

An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the 'cn=changelog' LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive...

Huawei Campus Series Switches Remote Buffer Overflow DoS (HWPSIRT-2015-02014)

The remote Huawei switch is affected by a denial of service vulnerability due to improper validation of user-supplied input to the service processing function. A remote attacker, using a specially crafted username, can cause an array access violation, resulting in a restart of the device...

CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

DEBIAN-CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

Slack Discloses Breach of its User Profile Database

Enterprise and small business collaboration provider Slack today disclosed that a database storing user profile information has been compromised. The company said in a notice posted on its site that the unauthorized access has been blocked, and that it has implemented two-factor authentication...

CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

UBUNTU-CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

Scientific Linux Security Update : glibc on SL7.x x86_64 (20150305)

An out-of-bounds read flaw was found in the way glibc's iconv function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv function with a specially crafted argument could use this flaw to crash that application. CVE-2014-6040 It was found that the file...

GNU glibc denial of service vulnerability (CNVD-2015-01962)

glibc is the libc library, or c runtime library, released by GNU. glibc is the lowest level api in the linux system, and almost any other runtime library will depend on glibc. Name Service Switch NSS's file backend fails to isolate the entire database iteration from key-based query API calls, and...

OpenDaylight l2switch Security Bypass Vulnerability

Opendaylight, a project of the Linux Foundation in the United States, is a community-driven, open-source, software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly. A security bypass vulnerability exists in...

Cisco Content Services Switch Security Restriction Bypass Vulnerability

The Cisco CSS 11500 Content Services Switch is a load balancing device used to provide robust and measurable network services Layer 4-7 to data centers. The Cisco CSS 11500 device version 8.20.4.02 and earlier, has a security vulnerability in the management interface, which can be exploited by a...