The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.


Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption and performance degradation or service outage) via a flood of malformed TCP packets and UDP packets aka Bug ID CSCup25276.


The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).


arch/x86/x86_emulate/x86_emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges which allows local HVM guest users to gain privileges or cause a denial of service (crash) via a crafted (1) CALL (2) JMP (3) RETF (4) LCALL (5) LJMP or (6) LRET far branch instruction.


softmagic.c in file before 5.21 does not properly limit recursion which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.


The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28 3.2.x before 3.2.20 and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR) related to generating key IDs.


The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.


The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a denial of service (disconnect all wifi clients) via a request to wirelessChannelStatus.html.


ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed which triggers a state change from hung up to waiting for media.


The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.


libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences and not bits-per-pixel differences when determining whether an image size has changed which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MJPEG data.


The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails which allow local users to cause a denial of service via unspecified vectors.


libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1 which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.


Zend Framework 1 (ZF1) before 1.12.4 Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6 ZendOpenId ZendRest ZendService_AudioScrobbler ZendService_Nirvanix ZendService_SlideShare ZendService_Technorati and ZendService_WindowsAzure before 2.0.2 ZendService_Amazon before 2.0.3 and ZendService_Api before 1.0.0 allow remote attackers to cause a denial of service (CPU consumption) via (1) recursive or (2) circular references in an XML entity definition in an XML DOCTYPE declaration aka an XML Entity Expansion (XEE) attack. NOTE: this issue exists because of an incomplete fix for CVE-2012-6532.


Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted PROFINET packets a different vulnerability than CVE-2014-2253.


Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream aka an \xmppbomb\ attack related to core/portmanager.lua and util/xmppstream.lua.


Cisco IOS XR does not properly throttle ICMPv6 redirect packets which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages aka Bug ID CSCum14266.


The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.


Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8 3.9 and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet aka Bug ID CSCui59540.


Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCty45720.


Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets a different vulnerability than CVE-2014-2257.


nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream aka an \xmppbomb\ attack.


Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8 when BPF JIT is enabled allows local users to cause a denial of service (system crash) or possibly gain privileges via a long jump after a conditional jump.


Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe aka Bug ID CSCug97348.


Cisco IOS 12.2 and 15.0 through 15.3 when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices allows remote attackers to cause a denial of service (route switch processor outage) via crafted IP packets aka Bug ID CSCug84789.


vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports \Vendor rated issue as non-exploitable.\


Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files and obtain sensitive information or cause a denial of service (disk consumption) via the CSV export feature.


The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet.


The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x for 64-bit allow local guest administrators to cause a denial of service (CPU consumption) by leveraging access to certain service domains for HVM guests and a large input.


Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets aka Bug IDs CSCum52355 and CSCul49309.


Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80.


The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets aka Bug ID CSCty45731.


Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP messages aka Bug ID CSCug45898.


The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.


The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6 packet aka Bug ID CSCuo07437.


COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP.


epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches which allows remote attackers to cause a denial of service (use-after-free error and application crash) via a crafted UMTS Radio Link Control packet.


The PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00 through 3.10 SEIL/X1 routers 1.00 through 4.50 SEIL/X2 routers 1.00 through 4.50 SEIL/B1 routers 1.00 through 4.50 SEIL/Turbo routers 1.80 through 2.17 and SEIL/neu 2FE Plus routers 1.80 through 2.17 allows remote attackers to cause a denial of service (session termination or concentrator outage) via a crafted TCP packet.


The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets aka Bug ID CSCty45745.


channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1 11.8.x before 11.8.1 and 12.1.x before 12.1.1 and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2 when chan_sip has a certain configuration allows remote authenticated users to cause a denial of service (channel and file descriptor consumption) via an INVITE request with a (1) Session-Expires or (2) Min-SE header with a malformed or invalid value.


Xen 4.4.x when running on ARM systems does not properly restrict access to hardware features which allows local guest users to cause a denial of service (host or guest crash) via unspecified vectors related to (1) cache control (2) coprocessors (3) debug registers and (4) other unspecified registers.


The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted TAK (aka Tom's lossless Audio Kompressor) data.


The netback driver in Xen when using certain Linux versions that do not allow sleeping in softirq context allows local guest administrators to cause a denial of service (\scheduling while atomic\ error and host crash) via a malformed packet which causes a mutex to be taken when trying to disable the interface.


arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack which allows local users to cause a denial of service (system crash) by executing a crafted instruction.


plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated which allows remote attackers to cause a denial of service (resource consumption) via compressed XML elements in an XMPP stream aka an \xmppbomb\ attack.


The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.


The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets aka Bug ID CSCtq78722.


The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests aka Bug ID CSCuf51357.


Juniper Junos before 11.4R11 12.1 before 12.1R9 12.2 before 12.2R7 12.3R4 before 12.3R4-S3 13.1 before 13.1R4 13.2 before 13.2R2 and 13.3 before 13.3R1 as used in MX Series and T4000 routers allows remote attackers to cause a denial of service (PFE restart) via a crafted IP packet to certain (1) Trio or (2) Cassis-based Packet Forwarding Engine (PFE) modules.


The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions aka Bug ID CSCug97416.


The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists which allows remote attackers to cause a denial of service (assertion failure) as demonstrated by a crafted ttf file.


softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.


Unspecified vulnerability in lighttpd in Oracle Solaris 11.1 allows attackers to cause a denial of service via unknown vectors.


Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCty45733.


Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier when run in daemon mode does not properly handle the file descriptor for the logger which allows remote attackers to cause a denial of service (abort) via an invalid request.


The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests a different vulnerability than CVE-2012-6151.


The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems (VSS) or (2) Bidirectional Forwarding Detection (BFD) packets aka Bug IDs CSCug41049 and CSCue61890.


The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.


The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48) 8.4 before 8.4(6.5) 9.0 before 9.0(3.1) and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets aka Bug ID CSCuh44052.


Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) via a malformed SSL/TLS packet.


The XML parser in Microsoft Office 2007 SP3 2010 SP1 and SP2 and 2013 and Office for Mac 2011 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory consumption and persistent application hang) via a crafted XML document containing a large number of nested entity references as demonstrated by a crafted text/plain e-mail message to Outlook a similar issue to CVE-2003-1564.


Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.


The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE video data.


net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream aka an \xmppbomb\ attack.


res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service (crash) via a SUBSCRIBE request without any Accept headers which triggers an invalid pointer dereference.


A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing where specific malformed and mistimed FEATURES_REPLY messages cause the controller service to not delete switch and port data from its internal tracking structures.


Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors.


The GPT library in the Telegyr 8979 Master Protocol application in SUBNET SubSTATION Server 2 before SSNET 2.12 HF18808 allows remote attackers to cause a denial of service (persistent service crash) via a long RTU-to-Master message.


Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices when a Trident-based line card is used allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets aka Bug ID CSCun71928.


The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall which allows remote attackers to obtain potentially sensitive information about open ports or cause a denial of service by sending packets to many ports.


The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors aka Bug IDs CSCug77633 CSCug77667 CSCug78266 CSCug82795 and CSCuh58643.


The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet aka Bug ID CSCun09973.


Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream aka an \xmppbomb\ attack.


Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion aka Bug ID CSCug97315.


OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet.


The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted Main Mode packets aka Bug ID CSCun31021.


Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet aka Bug ID CSCui88426.


The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request aka \authentication chaining.\


The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data which allows remote attackers to cause a denial of service (application crash) via a crafted packet.


Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.


Zend Framework 1 (ZF1) before 1.12.4 Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6 ZendOpenId ZendRest ZendService_AudioScrobbler ZendService_Nirvanix ZendService_SlideShare ZendService_Technorati and ZendService_WindowsAzure before 2.0.2 ZendService_Amazon before 2.0.3 and ZendService_Api before 1.0.0 allow remote attackers to read arbitrary files send HTTP requests to intranet servers and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack. NOTE: this issue exists because of an incomplete fix for CVE-2012-5657.


The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1 when qualify_frequency \is enabled on an AOR and the remote SIP server challenges for authentication of the resulting OPTIONS request \ allows remote attackers to cause a denial of service (crash) via a PJSIP endpoint that does not have an associated outgoing request.


Cisco IOS 15.1(2)SY3 and earlier when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices allows remote attackers to cause a denial of service (device crash) via crafted multicast packets aka Bug ID CSCuf60783.


The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15 11.4 before 11.4R9 12.1 before 12.1R7 12.1X44 before 12.1X44-D20 12.1X45 before 12.1X45-D10 and 12.1X46 before 12.1X46-D10 as used in the SRX Series services gateways allows remote attackers to cause a denial of service (flow daemon crash and restart) via a crafted URL.


The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet (aka RoCE) address that is properly resolved within a different module which allows remote attackers to cause a denial of service (incorrect pointer dereference and system crash) via crafted network traffic.


plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream aka an \xmppbomb\ attack.


Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets a different vulnerability than CVE-2014-2255.


The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4 when NAT is used allows remote attackers to cause a denial of service (device reload) via crafted DNS packets aka Bug ID CSCue00996.


Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream aka an \xmppbomb\ attack.


The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4 when NAT is used allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted TCP packets aka Bug IDs CSCuh33843 and CSCuj41494.


Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP URI aka Bug ID CSCun06870.


Skybox

View

Appliances

with

ISO

and

does

not

properly

restrict

access

to

the

Admin

interface

which

allows

remote

attackers

to

obtain

sensitive

information

via

a

request

to

scripts/commands/getSystemInformation

or

scripts/commands/getNetworkConfigurationInfo

cause

a

denial

of

service

(reboot)

via

a

request

to

scripts/commands/reboot

or

cause

a

denial

of

service

(shutdown)

via

a

request

to

scripts/commands/shutdown.


Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages aka \Service Bus Denial of Service Vulnerability.\


Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets a different vulnerability than CVE-2014-2259.


Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCty45739.


COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service (infinite loop and process crash) via crafted input over a serial line.


PHPExcel before 1.8.0 as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 does not disable external entity loading in libxml which allows remote attackers to read arbitrary files cause a denial of service or possibly have other impact via an XML External Entity (XXE) attack.


The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1 5.6.x before 5.6.2.1 and 5.7.x before 5.7.2.1 does not properly validate input which allows remote attackers to cause a denial of service via unspecified vectors.


Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.


The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.


The EnergyWise module in Cisco IOS 12.2 15.0 15.1 15.2 and 15.4 and IOS XE 3.2.xXO 3.3.xSG 3.4.xSG and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet aka Bug ID CSCup52101.


XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files cause a denial of service or have unspecified other impact via crafted XML data.


Juniper Junos 11.4 before 11.4R12 12.1X44 before 12.1X44-D32 12.1X45 before 12.1X45-D25 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices when NAT protocol translation from IPv4 to IPv6 is enabled allows remote attackers to cause a denial of service (flowd hang or crash) via a crafted packet.


IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of service (reboot) via a flood of IP packets.


The SamlHeaderInHandler in Apache CXF before 2.6.11 2.7.x before 2.7.8 and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.


The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets aka Bug ID CSCuq93406.


The TCP reassembly function in the inet module in FreeBSD 8.3 before p16 8.4 before p9 9.1 before p12 9.2 before p5 and 10.0 before p2 allows remote attackers to cause a denial of service (undefined memory access and system crash) or possibly read system memory via multiple crafted packets related to moving a reassemble queue entry to the segment list when the queue is full.


The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \00000000\ fragment header.


Use-after-free

vulnerability

in

Blink

as

used

in

Google

Chrome

before

allows

remote

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

crafted

JavaScript

code

that

triggers

a

widget-position

update

that

improperly

interacts

with

the

render

tree

related

to

the

FrameView::updateLayoutAndStyleForPainting

function

in

and

the

RenderLayerScrollableArea::setScrollOffset

function

in


Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS 3.5.xS 3.6.xS and 3.7.xS before 3.7.6S; 3.8.xS 3.9.xS and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed DHCPv6 packets aka Bug ID CSCum90081.


Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins aka Bug ID CSCuo56780.


Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17 when configured to use the internal DNS lookup client allows remote attackers to cause a denial of service (crash and reboot) via vectors related to a DNS lookup.


Use-after-free vulnerability in core/dom/Node.cpp in Blink as used in Google Chrome before 37.0.2062.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of render-tree inconsistencies.


Juniper Junos 11.4 before 11.4R8 12.1 before 12.1R5 12.1X44 before 12.1X44-D20 12.1X45 before 12.1X45-D15 12.1X46 before 12.1X46-D10 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via a malformed packet related to translating IPv6 to IPv4.


The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.


The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11 9.1 before p14 9.2 before p7 and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call which triggers an invalid page table pointer dereference.


The dbus-daemon in D-Bus 1.2.x through 1.4.x 1.6.x before 1.6.20 and 1.8.x before 1.8.4 sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service.


Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.


The prefetch implementation in named in ISC BIND 9.10.0 when a recursive nameserver is enabled allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.


The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint handler which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs and consequently cause a denial of service (portal outage or system reload) via crafted HTTP requests aka Bug ID CSCup54208.


The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service (process crash) via a crafted SIP message that is not properly handled during processing of an XML document aka Bug ID CSCtq76428.


snmplib/mib.c in net-snmp 5.7.0 and earlier when the -OQ option is used allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message which triggers a conversion to the variable type designated in the MIB file as demonstrated by a NULL type in an ifMtu trap message.


Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections which allows remote attackers to cause a denial of service (resource consumption) via an incomplete SSL/TLS handshake for an IMAP/POP3 connection.


The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages aka Bug ID CSCun73782.


The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.


Filters\\LAV\\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file.


Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet.


The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.


The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.


HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted \Range headers with unidentifiable byte-range values.\


The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO 3.6.xS and 3.7.xS before 3.7.6S and 3.8.xS 3.9.xS and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets aka Bug ID CSCug75942.


Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing which allows remote attackers to cause a denial of service (BGP neighbor flapping) by sending many crafted IPv4 packets aka Bug ID CSCuo29736.


modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink as used in Google Chrome before 37.0.2062.94 does not properly consider concurrent threads during attempts to update biquad filter coefficients which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.


Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.


The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame.


Use-after-free vulnerability in the SVG implementation in Blink as used in Google Chrome before 37.0.2062.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.


tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet aka Bug ID CSCum00468.


silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via a crafted IP packet a different vulnerability than CVE-2014-3889.


arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.


The

wrap

function

in

in

the

bindings

in

Blink

as

used

in

Google

Chrome

before

has

an

erroneous

fallback

outcome

for

wrapper-selection

failures

which

allows

remote

attackers

to

cause

a

denial

of

service

via

vectors

that

trigger

stopping

a

worker

process

that

had

been

handling

an

Event

object.


dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 when running on Linux 2.6.37-rc4 or later allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor then exceeding the maximum recursion depth before the initial message is forwarded.


Cisco

IOS

and

through

and

IOS

XE

and

before

and

before

and

before

allow

remote

attackers

to

cause

a

denial

of

service

(device

reload)

via

a

crafted

SIP

message

aka

Bug

ID


IBM CICS Transaction Server 3.1 3.2 4.1 4.2 and 5.1 on z/OS does not properly implement CEMT transactions which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream.


OpenStack Neutron before 2013.2.4 2014.x before 2014.1.2 and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.


The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.


The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTPS packets that require tower processing aka Bug ID CSCum97038.


The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor related to (1) drivers/hid/hid-cherry.c (2) drivers/hid/hid-kye.c (3) drivers/hid/hid-lg.c (4) drivers/hid/hid-monterey.c (5) drivers/hid/hid-petalynx.c and (6) drivers/hid/hid-sunplus.c.


The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.


The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.


Xen 4.4.x does not properly check alignment which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel.


The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.


Cisco

IOS

and

and

IOS

XE

and

before

and

before

and

before

and

and

before

allow

remote

attackers

to

cause

a

denial

of

service

(device

reload)

via

malformed

RSVP

packets

aka

Bug

ID


The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state suspending it which puts into an ERROR state and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.


d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.


Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.


The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked which allows local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings.


Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink as used in Google Chrome before 37.0.2062.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging script execution that occurs before notification of node removal.


Unspecified vulnerability in PowerDNS Recursor (aka pdns_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service (crash) via an unknown sequence of malformed packets.


The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet aka Bug ID CSCuo69206.


PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.


Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet aka Bug ID CSCuq10466.


The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.


arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.


Use-after-free

vulnerability

in

the

bindings

in

Blink

as

used

in

Google

Chrome

before

allows

remote

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

by

leveraging

improper

use

of

HashMap

add

operations

instead

of

HashMap

set

operations

related

to

and


dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.


The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13) 9.1 before 9.1(5.7) and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS packets aka Bug ID CSCuo68327.


The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT which allows remote attackers to cause a denial of service (device reload) via multipart SDP IPv4 traffic aka Bug ID CSCun54071.


silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via crafted data in the Options field of a TCP header a different vulnerability than CVE-2014-3890.


Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in content_search_controller.rb or (2) action parameter in the respond function in api/api_controller.rb in app/controllers/katello/ which is passed to the to_sym method.


The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15) 8.6 before 8.6(1.14) 9.0 before 9.0(4.8) and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted packet that is sent during tunnel creation aka Bug ID CSCum96401.


Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file aka an XML Entity Expansion (XEE) attack.


The QSvg module in Qt as used in the Mumble client 1.2.x before 1.2.6 allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.


The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet aka Bug ID CSCum96282.


Publify before 8.0.1 is vulnerable to a Denial of Service attack


JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file.


Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown.


Use-after-free

vulnerability

in

in

the

Web

Sockets

implementation

in

Blink

as

used

in

Google

Chrome

before

allows

remote

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

vectors

that

trigger

an

unexpectedly

long

lifetime

of

a

temporary

object

during

method

completion.


The cdf_read_property_info function in file before 5.19 as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14 does not properly validate a stream offset which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.


Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink as used in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.


Memory leak in Cisco IOS 15.0 15.1 15.2 and 15.4 and IOS XE 3.3.xSE before 3.3.2SE 3.3.xXO before 3.3.1XO 3.5.xE before 3.5.2E and 3.11.xS before 3.11.1S allows remote attackers to cause a denial of service (memory consumption and interface queue wedge or device reload) via malformed mDNS packets aka Bug ID CSCuj58950.


NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service (\remote control\ outage) by creating a /tmp/xmosaic.pid file for every possible PID.


libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet as demonstrated by an attack against named dig or delv.


Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending crafted TCP packets quickly aka Bug ID CSCuo42063.


The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets aka Bug ID CSCuo42252.


Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets aka Bug ID CSCuo68417.


The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.


Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file.


Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows when the default AcceptFilter is enabled allows remote attackers to cause a denial of service (memory consumption) via crafted requests.


BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability


The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface aka Bug ID CSCuq39550.


The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO 3.6.xS and 3.7.xS before 3.7.6S and 3.8.xS 3.9.xS and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets aka Bug ID CSCue22753.


routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RIP request from a source not on a directly connected network.


OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.


The

WebGL

implementation

in

Google

Chrome

before

does

not

ensure

that

clear

calls

interact

properly

with

the

state

of

a

draw

buffer

which

allows

remote

attackers

to

cause

a

denial

of

service

(read

of

uninitialized

memory)

via

a

crafted

CANVAS

element

related

to

and


arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.


The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood aka Bug ID CSCun34125.


The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4 12.1X44 before 12.1X44-D40 12.1X45 before 12.1X45-D30 12.1X46 before 12.1X46-D25 and 12.1X47 before 12.1X47-D10 when an Application Layer Gateway (ALG) is enabled allows remote attackers to cause a denial of service (flowd crash) via a crafted packet.


The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.


The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51) 8.4 before 8.4(7.15) 8.7 before 8.7(1.13) 9.0 before 9.0(4.8) and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted series of GTP packets aka Bug ID CSCum56399.


The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.


The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17 when configured to use the internal DNS lookup client allows remote attackers to cause a denial of service (crash and reboot) via a sequence of malformed packets to the device IP.


The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet aka Bug IDs CSCum85558 CSCum20949 CSCul61849 and CSCul71149.


codec\\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file as demonstrated by a png in a .wave file.


parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references a variant of the \billion laughs\ attack.


IBM Rational ClearCase 7.1 before 7.1.2.15 8.0.0 before 8.0.0.12 and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet aka Bug ID CSCun67791.


ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file.


JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size parameter to auth/qrcode related to QR code generation.


The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter which allows remote authenticated users to cause a denial of service (service crash) via a crafted string aka Bug ID CSCuq31819.


The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently aka Bug ID CSCug65204.


The HVMOP_inject_msi function in Xen 4.2.x 4.3.x and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests which trigger an error messages to be logged.


Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink as used in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.


The

SQL*Net

inspection

engine

in

Cisco

ASA

Software

before

before

before

before

before

before

before

before

and

before

allows

remote

attackers

to

cause

a

denial

of

service

(device

reload)

via

crafted

SQL

REDIRECT

packets

aka

Bug

ID


Cisco IOS XE on ASR1000 devices when PPPoE termination is enabled allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet aka Bug ID CSCuo55180.


Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16 as used in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.


The str_buf_cat function in string.c in Ruby 1.9.3 2.0.0 and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string.


The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget as demonstrated by the (1) user or (2) channel name in a Qt dialog (3) subject common name or (4) email address to the Certificate Wizard or (5) server name in a tooltip.


IBM Rational ClearQuest 7.1 before 7.1.2.15 8.0.0 before 8.0.0.12 and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


The

SunRPC

inspection

engine

in

Cisco

ASA

Software

before

before

before

before

before

before

before

before

and

before

allows

remote

attackers

to

cause

a

denial

of

service

(device

reload)

via

crafted

SunRPC

packets

aka

Bug

ID


arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.


Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets aka Bug ID CSCui79745.


The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.


Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via a crafted SIP packet.


The cdf_count_chain function in cdf.c in file before 5.19 as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14 does not properly validate sector-count data which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.


The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet aka Bug ID CSCul80924.


The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue as demonstrated by ASCONF probes related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.


Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet aka Bug ID CSCuq12031.


Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packets aka Bug ID CSCuj72215.


Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices when the ISDN Basic Rate Interface is enabled allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection leading to an invalid state of the hardware encryption module aka Bug ID CSCul77897.


NCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service (\remote control\ outage) by creating a /tmp/Mosaic.pid file for every possible PID.


The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors that leverage \type confusion\ for callback processing.


D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.


Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices when bridge-group virtual interface (BVI) routing is enabled allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets aka Bug ID CSCuo91149.


The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted UDP packets aka Bug ID CSCul36176.


file before 5.19 does not properly restrict the amount of data read during a regex search which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.


Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packet aka Bug ID CSCuo59052.


Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets aka Bug ID CSCun83985.


Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier when SharePoint acceleration is enabled does not properly parse SharePoint responses which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application aka Bug ID CSCue47674.


kernel/auditsc.c in the Linux kernel through 3.14.5 when CONFIG_AUDITSYSCALL is enabled with certain syscall rules allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.


The SQL engine in IBM DB2 9.5 through FP10 9.7 through FP9a 9.8 through FP5 10.1 through FP4 and 10.5 before FP4 on Linux UNIX and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted UNION clause in a subquery of a SELECT statement.


GOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file.


The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets aka Bug ID CSCtz35468.


Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc 1.0.0 before 1.0.0o and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.


Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet aka Bug ID CSCup77750.


The cdf_check_stream_offset function in cdf.c in file before 5.19 as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14 relies on incorrect sector-size data which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.


Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.


Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username which triggers the firewall to blacklist the IP.


Cisco IOS 15.0 15.1 15.2 and 15.4 and IOS XE 3.3.xSE before 3.3.2SE 3.3.xXO before 3.3.1XO 3.5.xE before 3.5.2E and 3.11.xS before 3.11.1S allow remote attackers to cause a denial of service (device reload) via malformed mDNS packets aka Bug ID CSCul90866.


The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.


Symantec Encryption Desktop 10.3.x before 10.3.2 MP3 and Symantec PGP Desktop 10.0.x through 10.2.x allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.


The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling which allows remote attackers to cause a denial of service (memory consumption) via crafted packets aka Bug ID CSCuq68888.


The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.


The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0 12.0 12.1 12.2 14.0 15.0 16.x through 16.1.2 and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet aka Bug ID CSCuo21914.


Juniper

Junos

before

before

before

before

before

before

before

before

before

before

before

and

before

when

Auto-RP

is

enabled

allows

remote

attackers

to

cause

a

denial

of

service

(RDP

routing

process

crash

and

restart)

via

a

malformed

PIM

packet.


Cisco IOS XR 4.3(.2) and earlier as used in Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet aka Bug ID CSCuo95165.


namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names.


The

ScopedClipboardWriter::WritePickledData

function

in

in

Google

Chrome

before

on

OS

X

and

Linux

and

before

on

Windows

does

not

verify

a

certain

format

value

which

allows

remote

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

vectors

related

to

the

clipboard.


Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999.


Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.


Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.


Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink as used in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.


Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data as demonstrated by pressing the enter key twice.


Sophos Anti-Virus engine (SAVi) before 3.50.1 as used in VDL 4.97G 9.7.x before 9.7.9 10.0.x before 10.0.11 and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects which allows local users to bypass anti-virus protection cause a denial of service (resource consumption CPU consumption and eventual crash) or spoof \ready for update\ messages by performing certain operations on mutexes or events including (1) DataUpdateRequest (2) MmfMutexSAV-**** (3) MmfMutexSAV-Info (4) ReadyForUpdateSAV-**** (5) ReadyForUpdateSAV-Info (6) SAV-**** (7) SAV-Info (8) StateChange (9) SuspendedSAV-**** (10) SuspendedSAV-Info (11) UpdateComplete (12) UpdateMutex (13) UpdateRequest or (14) SophosALMonSessionInstance as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete UpdateMutex and UpdateRequest objects.


Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33 as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


core/html/HTMLSelectElement.cpp in the DOM implementation in Blink as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux does not properly check renderer state upon a focus event which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \type confusion\ for SELECT elements.


Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink as used in Google Chrome before 33.0.1750.149 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure.


The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.


The TCP implementation in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (non-paged pool memory consumption and system hang) via malformed data in the Options field of a TCP header aka \TCP Denial of Service Vulnerability.\


The ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access and device crash) via a crafted call.


Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1 as used in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service (application hang) or possibly have unspecified other impact via a text-to-speech request.


Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x when using a multithreaded toolstack does not properly handle a failure by the xc_cpumap_alloc function which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.


The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x 4.3.x and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes which triggers a \read or write past the end of the ring.\


The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.


Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink as used in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attributes.


The GPU driver in the kernel in Google Chrome OS before 33.0.1750.152 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.


The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service (disk consumption) by uploading a large file.


The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.


Xen 3.3 through 4.1 when XSM is enabled allows local users to cause a denial of service via vectors related to a \large memory allocation \ a different vulnerability than CVE-2014-1891 CVE-2014-1893 and CVE-2014-1894.


Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink as used in Google Chrome before 34.0.1847.137 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.


The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.


VMware Workstation 9.x before 9.0.1 VMware Player 5.x before 5.0.1 VMware Fusion 5.x before 5.0.1 VMware ESXi 4.0 through 5.1 and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port.


Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context a different vulnerability than CVE-2014-1559.


Use-after-free

vulnerability

in

in

Google

Chrome

before

on

Windows

and

OS

X

and

before

on

Linux

allows

remote

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

an

INPUT

element

that

triggers

the

presence

of

a

Speech

Recognition

Bubble

window

for

an

incorrect

duration.


Y-Cam camera models SD range YCB003 YCK003 and YCW003; S range YCB004 YCK004 YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002 YCK002 and YCW003; and Y-cam Original Range YCB001 YCW001 running firmware 4.30 and earlier allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp (2) item parameter to en/account/accedit.asp or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.


Google V8 as used in Google Chrome before 34.0.1847.116 does not properly use numeric casts during handling of typed arrays which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.


Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors.


Use-after-free

vulnerability

in

the

RenderBlock::addChildIgnoringAnonymousColumnBlocks

function

in

in

Blink

as

used

in

Google

Chrome

before

allows

remote

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

vectors

involving

addition

of

a

child

node.


Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.


Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.


The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0 Firefox ESR 31.x before 31.3 Thunderbird before 31.3 and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.


Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion.


The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a vnode which allows remote authenticated users to cause a denial of service (deadlock) via vectors involving a thread that uses the correct locking order.


Use-after-free vulnerability in the SVG implementation in Blink as used in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object related to core/svg/SVGFontFaceElement.cpp.


Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.


The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors.


The SNMP implementation in Siemens RuggedCom ROS before 3.11 ROS 3.11 for RS950G ROS 3.12 before 3.12.4 and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (device outage) via crafted packets.


Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.


The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.


Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors.


Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion CPU consumption and crash) via a crafted indirect offset value in the magic of a file.


Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context a different vulnerability than CVE-2014-1558.


SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service (lock-screen hang) by leveraging a state-management error.


The do_physdev_op function in Xen 4.1.5 4.1.6.1 4.2.2 through 4.2.3 and 4.3.x does not properly restrict access to the (1) PHYSDEVOP_prepare_msix and (2) PHYSDEVOP_release_msix operations which allows local PV guests to cause a denial of service (host or guest malfunction) or possibly gain privileges via unspecified vectors.


Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database implementation in Blink as used in Google Chrome before 33.0.1750.149 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of scheduled tasks during shutdown of a thread.


Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1 when using XMLRepresentation or XML serializers allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.


The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service (infinite loop or process crash) via crafted input over a serial line.


The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution which allows remote attackers to read arbitrary files cause a denial of service and conduct CSRF attacks via crafted XML aka an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152 CVE-2013-7315 and CVE-2013-6429.


The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via fragmented packets aka Bug ID CSCui91266.


The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24 4.0.x before 4.0.19 and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.


Squid 3.1 before 3.3.12 and 3.4 before 3.4.4 when SSL-Bump is enabled allows remote attackers to cause a denial of service (assertion failure) via a crafted range request related to state management.


The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands aka Bug ID CSCul49976.


The default configuration for the file upload handling system in Django before 1.4.14 1.5.x before 1.5.9 1.6.x before 1.6.6 and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.


MultipartStream.java in Apache Commons FileUpload before 1.3.1 as used in Apache Tomcat JBoss Web and other products allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.


The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x 5.x 6.x 7.0 before 7.0.250.0 7.1 7.2 and 7.3 when IGMPv3 Snooping is enabled allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message aka Bug ID CSCuh33240.


Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message aka Bug ID CSCui50360.


IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27 6.1.5 through 6.1.5.3 CF27 7.0 through 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.


The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6 when SVNListParentPath is enabled allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET as demonstrated by the \svn ls http://svn.example.com\ command.


The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8 6.20.0 and earlier when using certain build conditions allows remote attackers to cause a denial of service (crash) via vectors related to \a NULL pointer of the password.\


IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon restart) via crafted MQ Telemetry Transport (MQTT) authentication data.


Juniper Junos 10.4 before 10.4R16 11.4 before 11.4R10 12.1R before 12.1R8-S2 12.1X44 before 12.1X44-D30 12.1X45 before 12.1X45-D20 12.1X46 before 12.1X46-D10 12.2 before 12.2R7 12.3 before 12.3R4-S2 13.1 before 13.1R3-S1 13.2 before 13.2R2 and 13.3 before 13.3R1 allows remote attackers to cause a denial of service (rdp crash) via a large BGP UPDATE message which immediately triggers a withdraw message to be sent as demonstrated by a long AS_PATH and a large number of BGP Communities.


The IPv6 implementation in Microsoft Windows 8 Windows Server 2012 and Windows RT does not properly validate packets which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets aka \TCP/IP Version 6 (IPv6) Denial of Service Vulnerability.\


The Standalone Enqueue Server in SAP Netweaver 7.20 7.01 and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.


QEMU possibly before 2.0.0 allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.


Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint which triggers an error.


Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.


The cdf_read_short_sector function in cdf.c in file before 5.19 as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.


Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections which allows remote attackers to obtain sensitive information modify data or cause a denial of service by leveraging network connectivity from a client system with a crafted host name aka Bug ID CSCud10992.


The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.


Unspecified vulnerability in Juniper Junos before 11.4R10-S1 before 11.4R11 12.1X44 before 12.1X44-D26 12.1X44 before 12.1X44-D30 12.1X45 before 12.1X45-D20 and 12.1X46 before 12.1X46-D10 when Dynamic IPsec VPN is configured allows remote attackers to cause a denial of service (new Dynamic VPN connection failures and CPU and disk consumption) via unknown vectors.


A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote attackers to cause a denial of service (CPU consumption) via a crafted request. NOTE: this vulnerability exists because of an unspecified regression.


IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27 6.1.5 through 6.1.5.3 CF27 7.0 through 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a crafted web request.


The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.


Juniper Junos 10.4S before 10.4S15 10.4R before 10.4R16 11.4 before 11.4R9 and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet.


Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets aka \iSCSI Target Remote Denial of Service Vulnerability.\


Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input aka Bug ID CSCui56136.


IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27 6.1.5 through 6.1.5.3 CF27 7.0 through 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 does not validate JSP includes which allows remote attackers to obtain sensitive information bypass intended request-dispatcher access restrictions or cause a denial of service (memory consumption) via a crafted URL.


Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.


Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames aka Bug ID CSCuh94944.


The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.


Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server (2) ClearQuest Native client (3) ClearQuest Eclipse client and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9 7.1.2 through 7.1.2.13 8.0.0 through 8.0.0.10 and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.


Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header aka Bug ID CSCul24898.


The

XNM

command

processor

in

Juniper

Junos

before

before

before

before

before

before

before

before

before

before

and

before

when

xnm-ssl

or

xnm-clear-text

is

enabled

allows

remote

attackers

to

cause

a

denial

of

service

(memory

consumption)

via

unspecified

vectors.


WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9 3.7.x before 3.7.1 3.8.x before 3.8.2 3.9.x before 3.9.1 and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.


The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.


The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted packets to TCP port 7000 aka Bug ID CSCui67394.


in

Apache

Tomcat

before

before

and

before

does

not

properly

handle

attempts

to

continue

reading

data

after

an

error

has

occurred

which

allows

remote

attackers

to

conduct

HTTP

request

smuggling

attacks

or

cause

a

denial

of

service

(resource

consumption)

by

streaming

data

with

malformed

chunked

transfer

coding.


Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0 7.2 7.3 and 7.4 before 7.4.110.0 do not properly deallocate memory which allows remote attackers to cause a denial of service (reboot) by sending WebAuth login requests at a high rate aka Bug ID CSCuf52361.


in

Apache

Tomcat

before

allows

remote

attackers

to

cause

a

denial

of

service

(thread

consumption)

by

using

a

\Content-Length:

AJP

request

to

trigger

a

hang

in

request

processing.


The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to \a NULL pointer of the username.\


The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10 when request body decompression is enabled allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.


Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call which triggers an array index error and out-of-bounds kernel memory access.


The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2 7.3 7.4 before 7.4.121.0 and 7.5 when MLDv2 Snooping is enabled allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet aka Bug ID CSCuh74233.


Foreman has improper input validation which could lead to partial Denial of Service


IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (resource consumption) via WebSockets MQ Telemetry Transport (MQTT) data.


The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.


The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication which allows remote attackers to cause a denial of service (performance degradation) via unspecified use of this application aka Bug ID CSCum05347.


The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic containing malformed Hello messages aka Bug ID CSCul88851.


Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1 as used in Cloudera CDH 5.0.x before 5.0.2 do not check authorization for the (1) refreshNamenodes (2) deleteBlockPool and (3) shutdownDatanode HDFS admin commands which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command.


The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.


The ptrace system call in IBM AIX 5.3 6.1 and 7.1 and VIOS 2.2.x allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel memory via a crafted PT_LDINFO operation.


The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.


Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message.


The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.


The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2 as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0 12.1.2.0 and 12.1.3.0 and other products loads external parameter entities regardless of whether entity substitution or validation is enabled which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.


IBM SAN Volume Controller; Storwize V3500 V3700 V5000 and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8 and 7.1 and 7.2 before 7.2.0.3 allow remote attackers to obtain CLI access and consequently cause a denial of service via unspecified traffic to the administrative IP address.


The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.


The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors aka SPR KLYH9F4S2Z.


The

PLC

driver

in

ServerMain.exe

in

the

Kepware

KepServerEX

component

in

Schneider

Electric

StruxureWare

SCADA

Expert

ClearSCADA

build

build

build

build

build

build

build

build

and

build

allows

remote

attackers

to

cause

a

denial

of

service

(application

crash)

via

a

crafted

OPF

file

(aka

project

file).


The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC 2822 address.


Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (memory consumption) and bypass the ASLR protection mechanism via a crafted client that sends messages with an invalid data view aka \LRPC ASLR Bypass Vulnerability.\


The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop a related issue to CVE-1999-0103.


inetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers to cause a denial of service (disk or CPU consumption) via unspecified vectors.


The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the redirection table of an I/O APIC. NOTE: the affected code was moved to the ioapic_service function before the vulnerability was announced.


The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.


The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za 1.0.0 before 1.0.0m and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.


The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 when POST retries are enabled allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.