Kannel Arbitrary Process Termination Vulnerability

Kannel is an open source WAP and SMS gateway from the Kannel team. A security vulnerability exists in Kannel 1.5.0 and earlier versions, which stems from a program that creates a PID file after downgrading an account to a non-root account. A local attacker can exploit the vulnerability to termina...

Threat Analysis: Don’t Forget About Kangaroo Ransomware

The age of ransomware is upon us. Advanced ransomware variants are using NSA-leaked exploits to ravage hundreds of thousands of computers and collect thousands of dollars in bitcoins, while new variants are being produced on a weekly basis. With advanced samples taking up most of the media...

CVE-2017-1235

IBM WebSphere MQ is affected by CVE-2017-1235. The IBM security bulletin states that termination during an MQGET call of a client application running on a channel with SHARECNV=1 could cause a SIGSEGV and termination of the channel agent process, potentially leading to a denial of service. Affect...

CVE-2016-3104

mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...

The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, arises due to the execution of an operation beyond the buffer boundaries in memory reading beyond the memory boundaries when calling EncodeFileName::Decode. Exploiting this...

CVE-2017-13649

UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command. NOTE: t...

CVE-2017-9679

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs...

The vulnerability of the mod_auth_digest module in the Apache HTTP Server allows a hacker to cause the server to terminate abnormally.

The vulnerability of the modauthdigest module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause the server to terminate abnormally. Each instance of the server will continue to terminate abnormally eve...

The vulnerability in the qemu-nbd hardware emulation software of QEMU allows a hacker to induce a system failure.

The vulnerability in the qemu-nbd hardware emulation software of QEMU is related to incorrect data processing. Exploiting this vulnerability allows a remote attacker to cause a service failure abrupt termination of the daemon by disconnecting the connection between the server and the client durin...

August 7, 2017—KB4038220 (OS Build 14393.1537)

None None...

tigervnc: SSecurityVeNCrypt memory leak

A memory leak flaw was found in the way TigerVNC handled termination of VeNCrypt connections. A remote unauthenticated attacker could repeatedly send connection requests to the Xvnc server, causing it to consume large amounts of memory resources over time, and ultimately leading to a denial of...

Juniper Junos SRX, vSRX, and J-Series ISC BIND DoS (JSA10799)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in ISC BIND, specifically in the queryfind function within file bin/named/query.c, when simultaneously using DNS64 and RPZ for query responses. An...

CVE-2017-11746

Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a "kill cat /pathname/tenshi.pid" command...

DEBIAN-CVE-2017-11747

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a...

CVE-2017-2837

An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the...

UBUNTU-CVE-2017-11654

An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic...

DEBIAN-CVE-2017-11654

An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic...

CVE-2017-2836

An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or u...

PT-2017-12151 · Sipcrack +1 · Sipcrack +1

Name of the Vulnerable Software and Affected Versions: SIPcrack version 0.2 Description: An out-of-bounds read and write flaw was found in the way SIPcrack processed SIP traffic, due to mishandling of 0x00 termination of a payload array. A remote attacker could potentially use this flaw to crash...

The vulnerability of the DBD::mysql driver’s DBD::mysql module allows a attacker to cause a service failure or exert other effects.

The vulnerability of the DBD::mysql driver’s module is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects such as the termination of the application through MySQL server error messages or by losing...