209 matches found
CVE-2019-18836
Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continueonlistenerfilterstimeout is used."...
CVE-2019-9821
A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox 67...
Mozilla Firefox Memory Misreference Vulnerability (CNVD-2019-17486)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in AssertWorkerThread in versions prior to Mozilla Firefox 67, which arises from a mismanagement of system resources e.g., memory, disk space, files, et...
UBUNTU-CVE-2019-9821
A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox 67...
MariaDB 10.1.x < 10.1.5 wait_for_workers_idle() Function Worker Thread Handling DoS
The version of MariaDB running on the remote host is 10.1.x prior to 10.1.5. It is, therefore, affected by a denial of service vulnerability due to a flaw in the waitforworkersidle function that occurs when handling worker threads. An authenticated, remote attacker can exploit this to crash the...
Adobe Flash Player Double Free (APSB14-24: CVE-2014-0574)
A double free vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error caused by an attempt of the worker thread and the main thread to clear a shared ByteArray simultaneously. This vulnerability could lead to a crash of the player...
PT-2011-3047
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description The issue allows remote attackers to cause a denial of service, leading to worker thread exhaustion and UDP messaging outage, by sending many UDP messages. Recommendations...
CVE-2011-1316: Undefined Security Weakness
The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...
CVE-2010-4623: Undefined Security Weakness
WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...