8597 matches found
Linter Bastion DoS
The RPC call with number 0x08 "0x0040AB4E" allows a malicious individual to terminate any service on a remote computer where the linstmgr.exe program is running, even though they have no authority to do so. For example, this could involve terminating the Linter Bastion database management system,...
Google Chrome DoS
The Google Chrome browser contains a vulnerability related to memory reclamation use-after-free error in the function WebSharedWorkerStub::OnTerminateWorkerContext in the content/worker/websharedworkerstub.cc implementation of Web Workers. Exploiting this vulnerability allows malicious actors to...
CVE-2016-1440
The proxy process on Cisco Web Security Appliance WSA devices through 9.1.0-070 allows remote attackers to cause a denial of service CPU consumption by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468...
Cisco Web Security Appliance Denial of Service Vulnerability (CNVD-2016-04428)
Cisco Web Security Appliance WSA is a set of Web security appliances from Cisco USA. The appliance provides SaaS-based access control, real-time network reporting and tracking, and the development of security policies. A security vulnerability exists in the Cisco WSA's native pass-through FTP...
ETX-R vulnerable to denial-of-service (DoS)
Overview ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Junichi MURAKAMI of FFRI, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...
CVE-2016-3094
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...
CVE-2016-3094: Improper Input Validation
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...
PHP Interpreter Code Execution
The vulnerability of the mget function in the Fileinfo component of the PHP interpreter exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure application termination or execute arbitrary code using a specially created...
Atheme Program Modification Vulnerability
Atheme is a portable, secure, open source and modular set of IRC services. A program modification vulnerability exists in Atheme. A remote attacker could exploit the vulnerability by registering or terminating a specific account or username to change program operations...
Squid Proxy DoS
The vulnerability of the FwdState::connectedToPeer method FwdState.cc in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause a service failure application termination by using an unencrypted HTTP message...
AIX 7.2 TL 0 : bind (IV81282) (deprecated)
ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the DNS BIND server component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—the appearance of an “Assertion Failure” error, and the termination of the daemon—by using a specially crafted...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the BIND DNS server component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an “Assertion Failure” error and the termination of the daemon—by using a specially...
FuseISO DoS
The vulnerability of the isofsrealreadzf function isofs.c in the FuseISO disk mounting software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination, or possibly have other effects due to the large size of the ZF...
ZyXEL PMG5318-B20A Access Restriction Bypass
The vulnerability of the ZyXEL PMG5318-B20A router exists due to the absence of session termination after exiting the system. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using an automated workstation...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the DNS BIND server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an error message “Assertion failure” or the termination of the daemon—by using a specially creat...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-431)
This update for java-170-openjdk fixes the following issues : java-170-openjdk was updated to 2.6.5 - OpenJDK 7u99 boo972468 - Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency - Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX...
WebKit DoS
The vulnerability of the History component implementation in WebKit of the Safari browser and the iOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure application termination throug...
Squid Proxy DoS
The vulnerability of the http.cc component in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—such as the appearance of an “Assertion failure” message and the termination of the...
Asterisk IP-telephony DoS
The vulnerability of Asterisk IP-telephony systems and Certified Asterisk is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause service failures pointer assignment of an uninitialized pointer and emergency termination of operations...