Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.


internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.


Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.


VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.


Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.


Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly.


The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.


functions/imap_general.php in SquirrelMail as used in Red Hat Enterprise Linux (RHEL) 4 and 5 does not properly handle 8-bit characters in passwords which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.


Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


Use-after-free vulnerability in the Cascading Style Sheets (CSS) DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.


Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.


Unspecified vulnerability in HP Performance Insight 5.31 5.40 and 5.41 when Sybase is used allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors a different vulnerability than CVE-2012-3270.


Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information modify data or cause a denial of service via an OSS Remote Operation over an Expand connection.


OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.


slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service (resource consumption) via a long Unicode string a different vulnerability than CVE-2012-3007.


The SSLVPN implementation in Cisco IOS 12.4 15.0 15.1 and 15.2 when DTLS is not enabled does not properly handle certain outbound ACL configurations which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface aka Bug ID CSCte41827.


Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors aka Bug ID CSCtn78957.


The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.


Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.


ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.


The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27 8.0 before 8.0.0.5 and 8.5 before 8.5.0.1 and WebSphere Virtual Enterprise allows remote attackers to cause a denial of service (daemon outage) via a crafted request.


The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic aka Bug ID CSCtz02622.


The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.


The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper variable type for the allocation size which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.4 before 8.4(4.1) 8.5 before 8.5(1.11) and 8.6 before 8.6(1.3) allow remote attackers to cause a denial of service (device reload) via IPv6 transit traffic that triggers syslog message 110003 aka Bug ID CSCua27134.


The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5 8.x before 8.5(1)su4 and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG 3.4.xS and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description aka Bug IDs CSCtw66721 CSCtj33003 and CSCtw84664.


Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.


channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2 Asterisk Business Edition C.3.x before C.3.7.5 Certified Asterisk 1.8.11-certx before 1.8.11-cert4 and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses.


The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters as demonstrated using %0D or %0A.


Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets.


The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier when running on x86-64 systems allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.


IBM WebSphere Commerce 7.0 before 7.0.0.6 when persistent sessions and personalization IDs are enabled allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors.


The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buffer as demonstrated by a port scan.


GNU Gatekeeper before 3.1 does not limit the number of connections to the status port which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.


VMware Workstation 8.x before 8.0.4 VMware Player 4.x before 4.0.4 VMware ESXi 3.5 through 5.0 and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.


The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x when running an HVM guest does not properly reset certain state information between emulation cycles which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.


The Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2 in certain configurations of enabled categories and missing signatures allows remote attackers to cause a denial of service (device reload) via DNS packets aka Bug ID CSCtw55976.


The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.


PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index.


Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors.


The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI outage) via crafted packets aka Bug IDs CSCtf73188 CSCtf88059 CSCtf87951 CSCtf87908 and CSCtf88019.


Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets aka Bug ID CSCtr44822.


Unspecified vulnerability in HP Performance Insight 5.31 5.40 and 5.41 when Sybase is used allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors a different vulnerability than CVE-2012-3269.


Cisco Unity Connection (UC) 8.6 9.0 and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets aka Bug ID CSCtz76269.


The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.


The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers \desynchronization within the buffer size handling \ a different vulnerability than CVE-2012-3404.


XENMEM_populate_physmap in Xen 4.0 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier when translating paging mode is not used allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.


The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash and traffic-inspection outage) via network traffic aka Bug ID CSCta96144.


The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queues which allows remote attackers to cause a denial of service (incorrect memory access and module reboot) via application traffic aka Bug ID CSCtw70879.


The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic aka Bug ID CSCtq39602.


The SSLVPN implementation in Cisco IOS 15.1 and 15.2 when DTLS is enabled does not properly handle certain outbound ACL configurations which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface aka Bug ID CSCty97961.


ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.


HP OpenVMS 8.3 8.3-1H1 and 8.4 on the Itanium platform and 7.3-2 8.2 8.3 and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs which allows local users to cause a denial of service via unspecified vectors.


The

method

in

in

Ruby

on

Rails

before

before

and

before

converts

Digest

Authentication

strings

to

symbols

which

allows

remote

attackers

to

cause

a

denial

of

service

by

leveraging

access

to

an

application

that

uses

a

helper

method

as

demonstrated

by

the

authenticate_or_request_with_http_digest

method.


Pro-face WinGP PC Runtime 3.1.00 and earlier and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large amount of memory.


The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.


The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.


Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding which allows remote attackers to cause a denial of service by streaming data.


Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.


ISC BIND 9.4.x 9.5.x 9.6.x and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2 when DNSSEC validation is enabled does not properly initialize the failing-query cache which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.


Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector a different vulnerability than CVE-2012-2392.


Cisco IOS before 15.1(1)SY when Multicast Listener Discovery (MLD) snooping is enabled allows remote attackers to cause a denial of service (CPU consumption or device crash) via MLD packets on a network that contains many IPv6 hosts aka Bug ID CSCtr88193.


Cisco Unity Connection (UC) 7.1 8.0 and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product aka Bug ID CSCtd79132.


The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1) when DifferentHostFilter or SameHostFilter is enabled allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.


Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19 2.0.x before 2.0.10 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.


HP OpenVMS 8.3 8.3-1H1 and 8.4 on the Itanium platform and 7.3-2 8.2 8.3 and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs which allows remote attackers to cause a denial of service via unspecified vectors.


Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3 0.5.x before 0.5.6rc3 0.6.0.x before 0.6.0.9rc1 and 0.6.x before 0.6.3rc1 allows remote attackers to cause a denial of service (process hang) via unknown behavior on a Bitcoin network.


Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2 Certified Asterisk 1.8.11-certx before 1.8.11-cert4 and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox.


The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location.


Pro-face WinGP PC Runtime 3.1.00 and earlier and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted packet with a certain opcode and a large value in a size field.


The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.


The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.


WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.


The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately related to an \event-driven programming flaw.\


RealNetworks RealPlayer before 15.0.6.14 RealPlayer SP 1.0 through 1.1.5 and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.


Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header aka Bug ID CSCtu32832.


The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a buffer length which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (stack corruption and crash) via a format string that uses positional parameters and many format specifiers.


The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries which allows remote DNS servers to cause a denial of service (named service hang) via a \$\ character in a DN in a DNS query.


Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update aka Bug ID CSCty89224.


The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1 Cisco TelePresence Manager before 1.9.0 and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets (2) a high rate of TCP connection requests or (3) a high rate of TCP connection terminations aka Bug IDs CSCti21830 CSCti21851 CSCtj19100 CSCtj19086 CSCtj19078 CSCty11219 CSCty11299 CSCty11323 and CSCty11338.


Cisco IOS before 15.3(1)T on Cisco 2900 devices when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode allows remote attackers to cause a denial of service (serial-interface outage) via certain Frame Relay traffic aka Bug ID CSCub13317.


epan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a zero value in a sub-type length field.


Google CityHash computes hash values without properly restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table as demonstrated by a universal multicollision attack.


The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process.


The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19 when importing a key allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.


The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.


The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.


The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data structure to determine IKEv2 decryption parameters which allows remote attackers to cause a denial of service (application crash) via a malformed packet.


The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon crash and disk consumption) via crafted data.


The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers which allows remote attackers to cause a denial of service (device reload) via crafted HTTP requests aka Bug ID CSCuc62460.


lib/rack/multipart.rb in Rack before 1.1.4 1.2.x before 1.2.6 1.3.x before 1.3.7 and 1.4.x before 1.4.2 uses an incorrect regular expression which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.


M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.


The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted market: URI in the SRC attribute of an IFRAME element.


The localization functionality in TWiki before 5.1.3 and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6 allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.


Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card aka Bug ID CSCud44300.


The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory which allows remote DHCP servers to cause a denial of service via a crafted response.


The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data which allows remote attackers to cause a denial of service (application crash) via crafted byte sequences.


The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type which allows remote attackers to cause a denial of service (infinite loop) via a packet that is neither IPv4 nor IPv6.


Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.


The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption) read the router version and possibly have other impacts via a request to download the router's DLLs or plugins as demonstrated by roteros.dll.


Rockwell Automation EtherNet/IP products; 1756-ENBT 1756-EWEB 1768-ENBT and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to cause a denial of service (control and communication outage) via a CIP message that specifies a logic-execution stop and fault.


FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections.


The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.


InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).


The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0 4.1 and 4.2 allow local guest OS users to cause a denial of service (host crash) and possibly have other unspecified impacts via unspecified vectors related to \broken locking checks\ in an \error path.\ NOTE: this issue was originally published as part of CVE-2012-3497 which was too general; CVE-2012-3497 has been SPLIT into this ID and others.


The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2 when running with certain -probesize values allows remote attackers to cause a denial of service (crash) via a crafted MP3 file possibly related to frame size or lack of sufficient \frames to estimate rate.\


Rockwell Automation EtherNet/IP products; 1756-ENBT 1756-EWEB 1768-ENBT and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to cause a denial of service (control and communication outage) via a CIP message that modifies the (1) configuration or (2) network parameters.


VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2 and vCSA 5.0 before Update 2 allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries.


Net-SNMP 5.7.1 and earlier when AgentX is registering to handle a MIB and processing GETNEXT requests allows remote attackers to cause a denial of service (crash or infinite loop CPU consumption and hang) by causing the AgentX subagent to timeout.


The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0 4.1 and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the \bad_copy error path.\ NOTE: this issue was originally published as part of CVE-2012-3497 which was too general; CVE-2012-3497 has been SPLIT into this ID and others.


Rockwell Automation EtherNet/IP products; 1756-ENBT 1756-EWEB 1768-ENBT and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 and earlier; GuardLogix 18 and earlier; SoftLogix 18 and earlier; CompactLogix controllers 19 and earlier; SoftLogix controllers 19 and earlier; ControlLogix controllers 20 and earlier; GuardLogix controllers 20 and earlier; and MicroLogix 1100 and 1400 allow remote attackers to cause a denial of service (control and communication outage) via a CIP message that specifies a reset.


The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.


epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 relies on a length field to calculate an offset value which allows remote attackers to cause a denial of service (infinite loop) via a zero value for this field.


Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8 when GnuPG is enabled allows remote attackers to configure encryption or signing for certain outbound e-mail and possibly cause a denial of service (loss of e-mail readability) via an e-mail message to a queue's address.


(1) Zend_Dom (2) Zend_Feed (3) Zend_Soap and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration aka an XML Entity Expansion (XEE) attack.


Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.


The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets a different vulnerability than CVE-2012-2663.


Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.


Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames which allows remote authenticated users to cause a denial of service (device crash) via unknown vectors aka Bug ID CSCuc65775.


ISC BIND 9.x before 9.7.6-P3 9.8.x before 9.8.3-P3 9.9.x before 9.9.1-P3 and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.


LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9 CPR9-SR1 CPR9-SR2 CPR9-SR3 CPR9-SR4 CPR9-SR5 CPR9-SR5.1 and CPR9-SR6 allows remote attackers to cause a denial of service (service outage) via a zero-byte UDP packet that is not properly handled by Logger.dll.


Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands.


Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since (2) If-None-Match or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information.


munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters.


Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.


The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) via crafted \debug hardware\ parameters aka Bug ID CSCtq86468.


Cisco IOS before 15.3(2)T when scansafe is enabled allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied by SYN-ACK packets from the Scan Safe Tower aka Bug ID CSCub85451.


The PPP dissector in Wireshark 1.4.x before 1.4.14 1.6.x before 1.6.9 and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet as demonstrated by a usbmon dump.


The XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service (API service outage) via a malformed XML document in a packet aka Bug ID CSCtg48206.


The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.2 before 8.2(5.17) 8.3 before 8.3(2.28) 8.4 before 8.4(2.13) 8.5 before 8.5(1.4) and 8.6 before 8.6(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted SIP media-update packet aka Bug ID CSCtr63728.


Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.


The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.2 before 8.2(5.30) and 8.3 before 8.3(2.34) allows remote attackers to cause a denial of service (device reload) via a crafted authentication response aka Bug ID CSCtz04566.


The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time which allows remote attackers to cause a denial of service (worker consumption) via an expensive request.


The BGP implementation in Cisco NX-OS does not properly filter AS paths which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message aka Bug ID CSCtn13055.


The

server

in

Cisco

IOS

through

and

through

and

IOS

XE

through

before

and

before

and

before

allows

remote

attackers

to

cause

a

denial

of

service

(device

reload)

via

a

malformed

packet

aka

Bug

ID


The CTDB dissector in Wireshark 1.4.x before 1.4.15 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.


Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a crafted web site as demonstrated by the Lenovo \Shop now\ page.


The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data but relies on a hash of this signature which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.


Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference related to an XML External Entity (XXE) issue.


The BGP implementation in Cisco IOS 15.2 IOS XE 3.5.xS before 3.5.2S and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute aka Bug IDs CSCtt35379 CSCty58300 CSCtz63248 and CSCtz62914.


The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart) via a crafted controller name.


Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.


The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger incorrectly terminated HTTP sessions aka Bug ID CSCtz99447.


epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.


The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.


Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches when a Supervisor Engine 7L-E card is installed allows remote attackers to cause a denial of service (card reload) via malformed packets that trigger uncorrected ECC error messages aka Bug ID CSCty88456.


Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative size value in a TCP request to (1) NiwMasterService or (2) NiwStorageService. NOTE: some of these details are obtained from third party information.


The BGP implementation in Cisco NX-OS does not properly filter AS paths which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message aka Bug ID CSCtn13065.


The KVM subsystem in the Linux kernel before 3.6.9 when running on hosts that use qemu userspace without XSAVE allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register then calling the KVM_RUN ioctl.


The CIP dissector in Wireshark 1.4.x before 1.4.15 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.


MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters aka Bug ID CSCtg20734.


in

Apache

Tomcat

before

and

before

when

the

NIO

connector

is

used

in

conjunction

with

sendfile

and

HTTPS

allows

remote

attackers

to

cause

a

denial

of

service

(infinite

loop)

by

terminating

the

connection

during

the

reading

of

a

response.


The HVMOP_pagetable_dying hypercall in Xen 4.0 4.1 and 4.2 does not properly check the pagetable state when running on shadow pagetables which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.


The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.


Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name which is processed as an OGNL expression.


Rockwell Automation Allen-Bradley MicroLogix controller 1100 1200 1400 and 1500; SLC 500 controller platform; and PLC-5 controller platform when Static status is not enabled allow remote attackers to cause a denial of service via messages that trigger modification of status bits.


The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.


The tor_timegm function in common/util.c in Tor before 0.2.2.39 and 0.2.3.x before 0.2.3.22-rc does not properly validate time values which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object a different vulnerability than CVE-2012-4419.


epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14 1.6.x before 1.6.9 and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.


The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2) RIPv6 message aka Bug ID CSCtj73415.


McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts and place them on a list of accounts that an administrator may wish to unlock which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames.


The (1) publickey_make_dss (2) publickey_make_rsa (3) signature_from_string (4) ssh_do_sign and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free \an invalid pointer on an error path \ which might allow remote attackers to cause a denial of service (crash) via unspecified vectors.


Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9 CPR9-SR1 CPR9-SR2 CPR9-SR3 CPR9-SR4 CPR9-SR5 CPR9-SR5.1 and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a negative integer value.


Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unknown vectors.


The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order which allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a crafted ioctl call.


Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers when a tunnel interface exists allows remote attackers to cause a denial of service (interface queue wedge) via tunneled (1) GRE/IP (2) IPIP or (3) IPv6 in IPv4 packets aka Bug ID CSCts66808.


The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19 when the net.ipv4.tcp_congestion_control illinois setting is enabled allows local users to cause a denial of service (divide-by-zero error and OOPS) by reading TCP stats.


Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors a different vulnerability than CVE-2012-4683.


plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15 1.6.x before 1.6.10 and 1.8.x before 1.8.2 does not properly handle certain integer fields which allows remote attackers to cause a denial of service (application exit) via a malformed packet.


The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39 and 0.2.3.x before 0.2.3.21-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison.


Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session aka Bug ID CSCto00318.


Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.


The Emerson DeltaV SE3006 through 11.3.1 DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1 and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service (device restart) via a crafted packet on (1) TCP port 23 (2) UDP port 161 or (3) TCP port 513.


The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths which allows remote attackers to cause a denial of service (BGP service reset) via a malformed UPDATE message aka Bug ID CSCtn13043.


epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.


The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.


The NFSv4 client implementation in IBM AIX 5.3 6.1 and 7.1 and VIOS before 2.2.1.4-FP-25 SP-02 does not properly handle GID values which allows remote attackers to cause a denial of service via unspecified vectors.


The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.


ibacm before 1.0.6 does not properly manage reference counts for multicast connections which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.


The NAT implementation in Cisco IOS 12.2 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets aka Bug ID CSCtr46123.


The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.3 before 8.3(2.25) 8.4 before 8.4(2.5) and 8.5 before 8.5(1.13) and the Firewall Services Module (FWSM) 4.1 before 4.1(7) in Cisco Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a crafted DCERPC packet aka Bug IDs CSCtr21346 and CSCtr27521.


The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home contact address aka Bug ID CSCtl00186.


Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory thread and CPU consumption) via a crafted XML message containing a DTD as demonstrated by a bucket-logging request.


Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.


The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute which allows local users to cause a denial of service (memory consumption) via a crafted application.


Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service (resource consumption) via unknown vectors.


The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source related to \type confusion.\


The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.


The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection aka Bug ID CSCtz72910.


The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents which allows remote attackers to cause a denial of service via unspecified vectors.


The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input as demonstrated by the padleft function.


The SIP ALG feature in the NAT implementation in Cisco IOS 12.2 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets aka Bug ID CSCtn76183.


The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.3 before 8.3(2.25) 8.4 before 8.4(2.5) and 8.5 before 8.5(1.13) and the Firewall Services Module (FWSM) 4.1 before 4.1(7) in Cisco Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a crafted DCERPC packet aka Bug IDs CSCtr21376 and CSCtr27524.


The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices and Prime Security Manager (aka PRSM) before 9.0.2-103 allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries aka Bug ID CSCub70603.


fwknop before 2.0.3 does not properly validate IP addresses which allows remote authenticated users to cause a denial of service (server crash) via a long IP address.


Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X before 10.3.183.23 and 11.x before 11.2.202.238 on Linux before 11.1.111.16 on Android 2.x and 3.x and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to cause a denial of service (application crash) by leveraging a logic error during handling of Firefox dialogs.


The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via a DHCP packet aka Bug ID CSCty96049.


Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors a different vulnerability than CVE-2012-4682.


The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 7.0 before 7.2(5.8) 7.1 before 7.2(5.8) 7.2 before 7.2(5.8) 8.0 before 8.0(5.28) 8.1 before 8.1(2.56) 8.2 before 8.2(5.27) 8.3 before 8.3(2.31) 8.4 before 8.4(3.10) 8.5 before 8.5(1.9) and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets aka Bug ID CSCtw84068.


aviary/jobcontrol.py in Condor as used in Red Hat Enterprise MRG 2.3 when removing a job allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.


The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15 1.6.x before 1.6.10 and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library which allows remote attackers to cause a denial of service (application crash) via a malformed packet.


ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1 in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.


The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the \administer hotblocks\ permission to cause a denial of service (infinite loop and time out) via a block that references itself.


python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value related to formatColumns.


The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.


libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file.


Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a sequence of VTY management sessions (aka exec sessions) aka Bug ID CSCtn43662.


Oracle Java SE 7 and earlier and OpenJDK 7 and earlier computes hash values without properly restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm a different vulnerability than CVE-2012-2739.


Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denial of service (input queue wedge) via a crafted series of RTCP packets aka Bug ID CSCuc42518.


The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1613.


screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request aka Bug ID CSCud50209.


Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger \wild writes.\


Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets aka Bug ID CSCub39268.


A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that when processed would lead to memory exhaustion or excessive CPU consumption.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1661.


Google V8 before 3.13.7.5 as used in Google Chrome before 23.0.1271.64 on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1612.


The dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1660.


ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1 when DNS64 is enabled allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1663.


The (1) XENMEM_decrease_reservation (2) XENMEM_populate_physmap and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.


ISC BIND 9.x before 9.7.6-P4 9.8.x before 9.8.3-P4 9.9.x before 9.9.1-P4 and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.


APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.


The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a \no object-group\ command followed by an object-group command aka Bug ID CSCts16133.


Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm.


Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.


Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions which allows remote authenticated users to cause a denial of service (device crash) by establishing multiple sessions aka Bug ID CSCtc59462.


The KYOCERA AH-K3001V AH-K3002V WX300K WX310K WX320K and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format.


The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path attributes aka Bug ID CSCsw63003.


IBM SPSS Modeler 14.0 14.1 14.2 through FP3 and 15.0 before FP2 allows remote attackers to read arbitrary files and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.


Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state aka Bug ID CSCto87436.


The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd as distributed in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1614.


kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service (ZServer thread lock) via a crafted URL.


gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog which allows local users to cause a denial of service by removing journal entries.


The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.


Unspecified vulnerability in HP Intelligent Management Center (iMC) TACACS+ Authentication Manager (TAM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1646.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1615.


The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.


The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request.


JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm a different vulnerability than CVE-2011-4838.


Asterisk Open Source 1.8.x before 1.8.19.1 10.x before 10.11.1 and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones when anonymous calls are enabled allow remote attackers to cause a denial of service (resource consumption) by making anonymous calls from multiple sources and consequently adding many entries to the device state cache.


Xen 4.2.x 4.1.x and 4.0 when using Intel VT-d for PCI passthrough does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge which allows local guests to cause a denial of service to other guests by injecting an interrupt.


The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim and creating a file with a crafted name that is associated with a specific CRC32C hash value.


Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable which might allow remote authenticated users to cause a denial of service (CPU consumption watchdog timeout crash) by walking specific SNMP objects.


epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.


Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.


The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files send HTTP requests to intranet servers and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.


Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm a different vulnerability than CVE-2011-4815.


Unspecified vulnerability on the HP LaserJet Pro M1212nf M1213nf M1214nfh M1216nfh M1217nfw and M1219nf and HotSpot LaserJet Pro M1218nfs with firmware before 20130211; LaserJet Pro CP1025nw with firmware before 20130212; and LaserJet Pro P1102w and P1606dn with firmware before 20130213 allows remote attackers to modify data or cause a denial of service via unknown vectors.


Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests as demonstrated by Slowloris.


Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked transfer coding.


Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1 10.x before 10.11.1 and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP (2) HTTP or (3) XMPP protocol.


Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service (crash) via a crafted request to www/apps/KiesAir/jws/ssd.php.


Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file as demonstrated by a .xls file with battery voltage data.


Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22 3.2.x before 3.2.4 and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers (2) long POST requests or (3) crafted authentication credentials.


python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permission to access.


The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel which allows local users to cause a denial of service (kernel fault and system crash) via a crafted application aka Bug ID CSCuc81669.


The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.


in

ekiga

before

allows

remote

attackers

to

cause

a

denial

of

service

(crash)

via

an

OPAL

connection

with

a

party

name

that

contains

invalid

strings.


IBM WebSphere Message Broker 6.1 before 6.1.0.12 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2 when the Parse Query Strings option is enabled on an HTTPInput node allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.


Cisco ASR 1000 devices with software before 3.8S when BDI routing is enabled allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation aka Bug ID CSCub55948.


The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token as demonstrated using the \Connection: TE Keep-Alive\ header.


Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors aka ZDI-CAN-1650.


Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.


Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier and MariaDB 5.5.28a and possibly other versions allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique nested elements.


A denial of service vulnerability exists in Jenkins 2.137 and earlier 2.121.2 and earlier in BasicAuthenticationFilter.java BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials.


A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.6; MongoDB Server v3.6 versions prior to 3.6.11.


An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled.


A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1 11.3.2 12.3.1 13.3.1 14.3 R5.1 R6 and prior which may allow an attacker to cause a denial of service.


Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.


An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix.


An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash which leads to denial of service in the book 2 case.


lux through 5.2.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


FoxitReader.exe

in

Foxit

Reader

allows

remote

attackers

to

cause

a

denial

of

service

(Break

instruction

exception

and

application

crash)

via

BMP

data

because

of

a

ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification

issue.


An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash which leads to denial of service in the HCB_ESC case.


DISPUTED

In

inspect.cpp

in

LibSass

a

high

memory

footprint

caused

by

an

endless

loop

(containing

a

Sass::Inspect::operator()(Sass::String_Quoted*)

stack

frame)

may

cause

a

Denial

of

Service

via

crafted

sass

input

files

with

stray

or

characters.

NOTE:

Upstream

comments

indicate

this

issue

is

closed

as

\won't

fix\

and

\works

as

intended\

by

design.


navcoin through 4.3.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.


reddcoin through 2.1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


Diamond through 3.0.1.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


qtum through 0.16 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.


HTMLCOIN through 2.12 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.


Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections but keeps the current connections active which can prevent legitimate users from recovering control.


neblio through 1.5.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


Squid before 4.4 when SNMP is enabled allows a denial of service (Memory Leak) via an SNMP packet.


In Artifex MuPDF 1.14.0 svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz_xml_att crash from excessive stack consumption) via a crafted svg file as demonstrated by mupdf-gl.


alqo through 4.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.


An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.


In The Sleuth Kit (TSK) through 4.6.4 hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).


An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash which leads to denial of service in the book 10 case.


ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


FoxitReader.exe

in

Foxit

Reader

allows

remote

attackers

to

cause

a

denial

of

service

(Break

instruction

exception

and

application

crash)

via

TIFF

data

because

of

a

ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification

issue.


An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.


An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash which leads to denial of service in the book 6 case.


An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash which leads to denial of service in the book 4 case.


PIVX through 3.1.03 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


CloakCoin through 2.2.2.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c leading to a denial of service.


stratisX through 2.0.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


emercoin through 0.7 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.


ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com dotnet or variant class.


An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.


The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.


The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode) WF-2861 10.51.LQ20I6 and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE GET request as demonstrated by the /DOWN/FIRMWAREUPDATE/ROM1 URI.


An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions.


ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a \code: Buffer.from(my_code 'hex')\ attribute.


An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP0 can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.


An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash which leads to denial of service in the book 8 case.


Phore through 1.3.3.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of service (reboot of the underlying Android 7.1.2 operating system) via a crafted application that sends data to WifiService.


peercoin through 0.6.4 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks which are stored on the victim's disk.


On Virgin Media wireless router 3.0 hub devices the web interface is vulnerable to denial of service. When POST requests are sent and keep the connection open the router lags and becomes unusable to anyone currently using the web interface.


particl through 0.17 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.


Certain NETGEAR devices are affected by denial of service. This affects GS110EMX before 1.0.0.9 GS810EMX before 1.0.0.5 XS512EM before 1.0.0.6 and XS724EM before 1.0.0.6.


Certain

NETGEAR

devices

are

affected

by

denial

of

service.

This

affects

before

before

before

before

before

before

before

before

before

and

before


An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service (application crash) via invalid LaTeX text.


An issue was discovered in Mattermost Server before 4.10.1 4.9.4 and 4.8.2. It allows attackers to cause a denial of service (application hang) via a malformed link in a channel.


An issue was discovered in Mattermost Server before 5.2.2 5.1.2 and 4.10.4. It allows remote attackers to cause a denial of service (memory consumption) via crafted image dimensions.


Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.


An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite_people slash command.


The Stealth endpoint in Unisys Stealth SVG 2.8.x 3.0.x before 3.0.1999 3.1.x 3.2.x before 3.2.030 and 3.3.x before 3.3.016 when running on Linux and AIX allows remote attackers to cause a denial of service (crash) via crafted packets.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002003.


A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections aka \Windows FTP Server Denial of Service Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system aka \Windows Hyper-V Denial of Service Vulnerability.\ This affects Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8437 CVE-2018-8438.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002010.


A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server aka \Windows SMB Denial of Service Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2 which allows an attacker to cause a denial of service via a crafted repository index file.


In Ruby before 2.2.10 2.3.x before 2.3.7 2.4.x before 2.4.4 2.5.x before 2.5.1 and 2.6.0-preview1 an attacker can pass a large HTTP request with a crafted header to WEBrick server or a crafted body to WEBrick server/handler and cause a denial of service (memory consumption).


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002008.


A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses aka \Windows DNSAPI Denial of Service Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002002.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system aka \Windows Hyper-V Denial of Service Vulnerability.\ This affects Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8436 CVE-2018-8438.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002009.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002006.


A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values aka \Connected User Experiences and Telemetry Service Denial of Service Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers.


WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.


A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests aka \HTTP.sys Denial of Service Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.30 allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.


windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file.


The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002004.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002000.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002001.


A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP protocols 0-10 and 1.0 are not affected.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system aka \Windows Hyper-V Denial of Service Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8436 CVE-2018-8437.


A denial of service vulnerability exists when .NET Framework improperly handles special web requests aka \.NET Framework Denial Of Service Vulnerability.\ This affects Microsoft .NET Framework 4.6 Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.7.1/4.7.2 Microsoft .NET Framework 4.7.2.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002007.


ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component. The LaunchDaemon implements an XPC service that uses an insecure XPC API for accessing data from an inbound XPC message. This could potentially result in an XPC object of the wrong type being passed as the first argument to the xpc_connection_create_from_endpoint function if controlled by an attacker. In recent versions of macOS and OS X Apple has implemented an internal check to prevent such XPC API abuse from occurring thus making this vulnerability only result in a denial of service if exploited by an attacker.


In Windows Master (aka Windows Optimization Master) 7.99.13.604 the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002005.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system aka \Windows Hyper-V Denial of Service Vulnerability.\ This affects Windows 10 Windows 10 Servers.


A denial of service vulnerability exists in the way that Windows handles objects in memory aka \Microsoft Graphics Component Denial of Service Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash which leads to denial of service.


PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.


In GraphicsMagick 1.3.31 the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping (which is not available beyond 8-bits/sample) and therefore lacks indexes initialization.


There

is

a

SEGV

in

Exiv2::Internal::TiffParserWorker::findPrimaryGroups

of

in

A

crafted

input

will

lead

to

a

remote

denial

of

service

attack.


The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service (BSOD) because uninitialized memory can be read.


GNU Tar through 1.30 when --sparse is used mishandles file shrinkage during read access which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g. a system backup running as root).


A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon causing the heartbeat between lmgrd and the vendor daemon to stop and the vendor daemon to shut down.


A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which loop indefinitely in mathematics processing while retaining locks. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10; v3.4 versions prior to 3.4.19.


Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact which allows attackers to cause a denial of service (\physical address not valid\ panic) via a crafted application.


In coders/bmp.c in ImageMagick before 7.0.8-16 an input file can result in an infinite loop and hang with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.


An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash which leads to denial of service.


The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of inconsistent memory management (new versus free) in ole2_read_header in ole.c.


libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file related to libfdata_tree_get_node_value in libfdata_tree.c.


A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.


A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects: MongoDB Inc. MongoDB Server v3.6 versions prior to 3.6.9 v4.0 versions prior to 4.0.3.


ETK_E900.sys a SmartETK driver for VIA Technologies EPIA-E900 system board is vulnerable to denial of service attack via IOCTL 0x9C402048 which calls memmove and constantly fails on an arbitrary (uncontrollable) address resulting in an eternal hang or a BSoD.


An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash which leads to denial of service.


An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash which leads to denial of service.