In ImageMagick 7.0.5-5 the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.6-1 a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-1 a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c which allows attackers to cause a denial of service in CloneDrawInfo in draw.c.


In ImageMagick 7.0.6-1 a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-1 a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-1 a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c which allows attackers to cause a denial of service related to ResizeMagickMemory in memory.c.


In ImageMagick 7.0.6-1 a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-1 a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.


In ImageMagick 7.0.6-1 a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-3 a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-3 a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-3 a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-3 missing validation was found in coders/mat.c leading to an assertion failure in the function DestroyImage in MagickCore/image.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-3 a missing NULL assignment was found in coders/png.c leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.6-3 a missing check for multidimensional data was found in coders/mat.c leading to a memory leak in the function ReadImage in MagickCore/constitute.c which allows attackers to cause a denial of service.


In ImageMagick 7.0.7-12 Q16 a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c which allows attackers to cause a denial of service via a crafted xpm image file.


In ImageMagick 7.0.7-12 Q16 a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c which allows attackers to cause a denial of service via a crafted psd image file.


In ImageMagick 7.0.7-12 Q16 a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c which allows attackers to cause a denial of service via a crafted XPM image file.


In ImageMagick 7.0.7-12 Q16 a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c which allows attackers to cause a denial of service via a crafted PGX image file.


In ImageMagick 7.0.7-12 Q16 a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c which allows attackers to cause a denial of service via a crafted PICT image file.


In ImageMagick 7.0.7-12 Q16 a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c which allows attackers to cause a denial of service via a crafted MAT image file.


In ImageMagick 7.0.7-12 Q16 a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.


In ImageMagick 7.0.7-12 Q16 an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.


CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings potentially gaining code execution or causing a denial of service via a crafted request.


mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via unspecified vectors aka internal bug 22278703 a different vulnerability than CVE-2015-6605.


SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted application aka internal bug 23591205.


mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors aka internal bugs 20915134 and 23142203 a different vulnerability than CVE-2015-7718.


mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors aka internal bug 22954006.


netd in Android before 2016-08-05 mishandles tethering and stdio streams which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application aka Qualcomm internal bug CR959631.


CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls which allows attackers to cause a denial of service (assertion failure and device crash) via a crafted app.


Safari in Apple iOS before 8.4.1 does not limit the rate of JavaScript alert messages which allows remote attackers to cause a denial of service (apparent browser locking) via a crafted web site.


MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs which allows attackers to cause a denial of service (ID collision and Watch launch outage) via a crafted universal provisioning profile app.


WebKit in Apple iOS before 9.3.3 Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.


ImageIO in Apple iOS before 9.3.3 OS X before 10.11.6 tvOS before 9.2.2 and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.


MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers which allows remote attackers to cause a denial of service (persistent application crash) via crafted JavaScript code.


ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image.


launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many connections to an inetd-based launchd service.


OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user which causes the server to hang.


OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.


UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file.


AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network a different vulnerability than CVE-2011-0162.


Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service (universal Push Notification outage) via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification.


Hypervisor in Apple OS X before 10.10.3 allows local users to cause a denial of service via unspecified vectors.


LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service (Finder crash) via crafted localization data.


cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors.


nettune in HP-UX 10.01 and 10.00 is installed setuid root which allows local users to cause a denial of service by modifying critical networking configuration information.


pcltotiff in HP-UX 10.x has unnecessary set group id permissions which allows local users to cause a denial of service.


ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service (port exhaustion) via unspecified vectors. NOTE: some details were obtained from third party sources.


ftpd in IBM AIX 5.1 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports.


named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.


named in ISC BIND 9.x before 9.9.9-P5 9.10.x before 9.10.4-P5 and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.


named in ISC BIND 9.x before 9.9.9-P5 9.10.x before 9.10.4-P5 and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.


named in ISC BIND 9.9.9-P4 9.9.9-S6 9.10.4-P4 and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.


named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record related to db.c and resolver.c.


AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset leading to an unhandled exception.


CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs which allows remote attackers to cause a denial of service (printing halt).


CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.


Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail aka the \Invalid URL\ vulnerability.


GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value.


ntpd in NTP before 4.2.8p9 when running on Windows allows remote attackers to cause a denial of service via a large UDP packet.


ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.


ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.


ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value which triggers the ctl_getitem function to return a NULL value.


Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.


netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set which allows local users to cause a denial of service by shutting down the interface.


dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.


inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen daytime echo etc. which allows remote attackers to cause a denial of service via a series of connections to the internal services.


saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent which allows remote attackers to cause a denial of service (memory consumption or crash).


saned in sane-backends 1.0.7 and earlier and possibly later versions does not properly allocate memory in certain cases which could allow attackers to cause a denial of service (memory consumption).


saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.


saned in sane-backends 1.0.7 and earlier when debug messages are enabled does not properly handle dropped connections which can prevent strings from being null terminated and cause a denial of service (segmentation fault).


rpcbind in SGI IRIX 6.5 through 6.5.15f and possibly earlier versions allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.


XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service (TCP connection disruption) via a crafted header.


btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info.


kmod in the Linux kernel does not set its uid suid gid or sgid to 0 which allows local users to cause a denial of service (crash) by sending certain signals to kmod.


Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice which causes a data structure to be allocated twice.


syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform when running in 32-bit compatibility mode allows local users to cause a denial of service (kernel hang) via crafted arguments.


libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.


Xen in the Linux kernel when running a guest on a host without hardware assisted paging (HAP) allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction.


Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet related to nbap.cnf and packet-nbap.c.


Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.


Array index error in LightDM (aka Light Display Manager) 1.14.3 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with no address.


Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.


Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via unspecified vectors related to workqueues.


IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.


Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.


Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to potentially enable denial of service via local access.


Improper initialization in the BMC firmware for some Intel(R) Server Boards Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable denial of service via local access.


Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access.


BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.


SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service (inaccessible database) via the tabls parameter.


Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments overwrite arbitrary files and cause a denial of service via encoded spaces in a pres:// URI a different vector than CVE-2008-6935.


Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments overwrite arbitrary files and cause a denial of service via encoded spaces in an im:// URI.


Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.


Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent access.


Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access.


Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.


Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.


Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access.


Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access.


Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.


Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0 SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access.


Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.


Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.


Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.


Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.


Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of service via network access.


Improper input validation in a subsystem for some Intel Server Boards Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access.


Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows* may allow an authenticated user to potentially enable a denial of service via local access.


Improper input validation in the Intel(R) SGX Platform Software for Windows* may allow an authenticated user to potentially enable a denial of service via local access.


Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.


Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64 13.0.32 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access.


Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access.


Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77 11.12.77 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.


Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77 11.12.77 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access.


Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.


Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.


Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.


AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.


AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application crash) via a malformed header value in a SIP INVITE message a different vulnerability than CVE-2007-3350.


AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application hang) via a flood of spoofed SIP INVITE requests.


AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file.


AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag.


AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of \<!--\ HTML comments.


AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.


The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access) via unspecified vectors.


Microsoft

Internet

Explorer

allows

remote

attackers

to

cause

a

denial

of

service

(crash)

by

declaring

the

sourceURL

attribute

on

an

uninitialized

DirectAnimation.StructuredGraphicsControl

ActiveX

Object

which

triggers

a

dereference.


Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object.


Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object which triggers a null dereference in the security check.


Microsoft

Internet

Explorer

allows

remote

attackers

to

cause

a

denial

of

service

(crash)

by

setting

the

Transition

property

on

an

uninitialized

DXImageTransform.Microsoft.RevealTrans.1

ActiveX

Object

which

triggers

a

dereference.


Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property.


Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times which triggers a null dereference.


Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.


Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT.


Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7.0.6000.16711 allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element a related issue to CVE-2009-1828.


Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expression against a long string as demonstrated using /(.)*/.


Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (NULL dereference and application crash) via JavaScript onUnload handlers that modify the structure of a document.


Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.


The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies which allows remote attackers to cause a denial of service (NS processing outage) via a series of malformed packets aka Bug ID CSCtd15904.


The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1 and VIOS 2.2.2.2-FP-26 SP-02 allows remote attackers to cause a denial of service (system hang) via a crafted packet to an IPv6 interface.


The IPv6 implementation in FreeBSD and NetBSD (unknown versions year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages a different vulnerability than CVE-2011-2393.


The IPv6 implementation in Apple Mac OS X (unknown versions year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.


The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages a different vulnerability than CVE-2010-4669.


The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.


The IPv6 implementation in FreeBSD and NetBSD (unknown versions year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.


The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.


There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file an attacker can cause the application using this library to crash denial of service or Code execution.


There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service.


There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8 which will lead to a denial of service attack.


There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->compscompno.data is not assigned a value after initialization(NULL). Impact is Denial of Service.


There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1 <5.1.6.2 <5.0.7.2 <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.


There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.


There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack.


There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.


There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8 related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.


There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.


There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.


There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.


There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8 related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.


There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack.


There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.


There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.


There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.


There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.


There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It will lead to a remote denial of service attack.


There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service.


There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service.


There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.


There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.


There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt.


There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.


scapy

is

affected

by:

Denial

of

Service.

The

impact

is:

infinite

loop

resource

consumption

and

program

unresponsive.

The

component

is:

_RADIUSAttrPacketListField.getfield(self..).

The

attack

vector

is:

over

the

network

or

in

a

pcap.

both

work.


Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84.


Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78.


jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file.


HDF5 1.13.1-1 is affected by: segmentation fault which causes a Denial of Service.


GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent).


libcaca is affected by a Divide By Zero issue via img2txt which allows a remote malicious user to cause a Denial of Service


Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check.


Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance.


FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h which allows a remote malicious user to cause a Denial of Service.


FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c which allows a remote malicious user to cause a Denial of Service.


FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c which allows a remote malicious user to cause a Denial of Service.


FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder which allows a remote malicious user to cause a Denial of Service


asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote).


There is an illegal address access in Exiv2::FileIo::pathabi:cxx11() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.


There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.


There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.


There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.


There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.


There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.


There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.


There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.


There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input.


There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service.


There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.


There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service.


There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.


There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access) because a certain conversion can result in a negative integer.


There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.


There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.


There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.


There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.


There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.


There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.


There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.


An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.


An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free .


An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception.


An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 .


An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 .


An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) .


An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow .


An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .


An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .


An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 .


An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 .


Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0 SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.


This issue was addressed with improved checks. This issue is fixed in iOS 14.7. Joining a malicious Wi-Fi network may result in a denial of service or arbitrary code execution.


IBM Jazz for Service Management 1.1.3 1.1.3.1 and 1.1.3.2 could allow an unauthorized local user to create unique catalog names that could cause a denial of service. IBM X-Force ID: 160296.


In Jiangmin Antivirus 16.0.0.100 the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x221808.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00813C.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00825C.


In Jiangmin Antivirus 16.0.0.100 the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008208.


In Jiangmin Antivirus 16.0.0.100 the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220840.


In Jiangmin Antivirus 16.0.0.100 the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220400.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A0081DC.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008084.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00824C.


In Jiangmin Antivirus 16.0.0.100 the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x990081C8.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A0081E4.


In Jiangmin Antivirus 16.0.0.100 the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008020.


In Jiangmin Antivirus 16.0.0.100 the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008224.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008240.


In Jiangmin Antivirus 16.0.0.100 the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x2208C0.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008268.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008254.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008088.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008264.


In Jiangmin Antivirus 16.0.0.100 the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008090.


In Jiangmin Antivirus 16.0.0.100 the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008210.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002124.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020F0.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300212C.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020FC.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002130.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300211C.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215F.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002128.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002100.


In K7 AntiVirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215B.


The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable which allows attackers to cause a denial of service (infinite loop and device hang) via a crafted application related to an \integer truncation vulnerability.\


The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device restart) via an invalid packet fragment.


The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec structure.


The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operations which allows local users to cause a denial of service (system hang) by triggering a truncation error.


The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect extraneous code in the IGMP parser.


The kernel in Apple OS X before 10.10 allows local users to cause a denial of service (panic) via a message to a system control socket.


The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices which allows local users to cause a denial of service (system crash) via unspecified vectors.


The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments which allows local users to gain privileges cause a denial of service (system crash) or obtain sensitive information via unspecified vectors.


The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory which allows attackers to cause a denial of service via a crafted app.


The kernel in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app a different vulnerability than CVE-2015-7040 CVE-2015-7042 and CVE-2015-7043.


The kernel in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app a different vulnerability than CVE-2015-7041 CVE-2015-7042 and CVE-2015-7043.


The kernel in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app a different vulnerability than CVE-2015-7040 CVE-2015-7041 and CVE-2015-7043.


The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app.


The kernel in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app a different vulnerability than CVE-2015-7040 CVE-2015-7041 and CVE-2015-7042.


The kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes which allows local users to cause a denial of service via a crafted volume.


The kernel in Apple iOS before 8.3 Apple OS X before 10.10.3 and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a crafted app.


The kernel in Apple iOS before 10 OS X before 10.12 tvOS before 10 and watchOS before 3 allows remote attackers to cause a denial of service (unintended lock) via unspecified vectors.


The kernel in Apple iOS before 9.3 OS X before 10.11.4 tvOS before 9.2 and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app.


The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.


Memory leak in Cisco IOS 12.2 15.1 and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets aka Bug ID CSCtx66011.


Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service (memory consumption and process crash) by sending many TCP requests aka Bug ID CSCud59736.


Memory leak in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets aka Bug ID CSCub59158.


Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections aka Bug ID CSCuo63677.


Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a crafted SIP REGISTER message over UDP aka Bug ID CSCtg41733.


Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors aka Bug ID CSCus91854.


Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors aka Bug ID CSCus91838.


Memory leak in Cisco IOS 12.2 12.4 15.0 15.2 and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets aka Bug ID CSCun49658.


Memory leak in Cisco Catalyst 4000 5000 and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.


Memory leak in Cisco IOS before 15.1(1)SY when IKEv2 debugging is enabled allows remote attackers to cause a denial of service (memory consumption) via crafted packets aka Bug ID CSCtn22376.


Memory leak in Cisco IOS XR 5.1.x through 5.1.3 5.2.x through 5.2.5 and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets aka Bug ID CSCux26791.


Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an unspecified HTTP status code aka Bug ID CSCur28305.


Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an HTTP file-range request for cached content aka Bug ID CSCuw97270.


Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface aka Bug ID CSCts12366.


Memory leak in Cisco IOS 12.4 15.0 and 15.1 and IOS XE 2.5.x through 3.2.x allows remote attackers to cause a denial of service (memory consumption) via a crafted SIP message aka Bug ID CSCti48504.


Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.


Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.


Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in the proxy backend.


Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.


Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in the handle backend.


Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in FileOperations.


Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.


Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.


Memory leak in the unshare_userns function in kernel/user_namespace.c in the Linux kernel before 3.10.6 allows local users to cause a denial of service (memory consumption) via an invalid CLONE_NEWUSER unshare call.


Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (memory consumption and process restart) via crafted SNMP packets aka Bug ID CSCue31546.


Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (1) IPv4 or (2) IPv6 IKE packets aka Bug ID CSCth81055.


Memory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote attackers to cause a denial of service (memory consumption) via malformed TCP packets aka Bug ID CSCug38080.


Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumption or process reload) by sending many port-162 UDP packets aka Bug ID CSCug80345.


Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests aka SPR KLYH92NKZY.


Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.


Memory leak in the token OCR functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service.


Memory leak in the image message functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service.


Memory leak in the TCP listener in Cisco IOS 9.x 10.x 11.x and 12.x allows remote attackers to cause a denial of service by sending crafted TCP traffic to an IPv4 address on the IOS device.


Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.


Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.


Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors aka Bug ID CSCub58999.


Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and instability) via crafted SIP packets aka Bug ID CSCuf67469.


Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0M before 15.0(1)M1 allows remote attackers to cause a denial of service (memory consumption and device reload) via malformed H.323 packets aka Bug ID CSCtb93855.


Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.


Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors related to private memory within the DB2 memory structure.


Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10 and OpenSolaris snv_57 through snv_94 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.


Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.


Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a \missing kfree.\


Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.


Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument.


Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet.


Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).


Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.


Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet format is unknown.


Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures.


Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.


Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable.


Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8.


Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object.


Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.


Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory consumption) via a large number of \VIRTIO_GPU_CMD_SET_SCANOUT:\ commands.


Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.


Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.


Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.


Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).


Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object identifiers in X.509 certificates.


Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys.


Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is reached.


Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact by opening /dev/cuse many times.


Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.


Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).


Memory leak in the Zone-Based Firewall in Cisco IOS 12.4 15.0 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted IP packets aka Bug ID CSCto89536.


Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4 15.0 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic aka Bug ID CSCti46171.


Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls which are not properly handled by the php_date_parse_tzfile cache.


Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering an out-of-array error case.


Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.


Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.


Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket.


Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.


Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.


Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.


Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation.


Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.


Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumption) via a crafted image file.


Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) by repeatedly creating a decode context.


Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.


Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML file.


Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters aka Bug ID CSCuy82367.


Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.


Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption).


Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems which prevents the SKB from being freed.


Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of authorization token keys.


Memory leak in the (1) httpd (2) nntpd and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.


Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers.


Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file.


Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets. NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898.


Memory leak in the ldap_explode_rdn API function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of service (memory consumption) by making many function calls.


In Libav 12.3 there is a floating point exception in the range_decode_culshift function (called from range_decode_bits) in libavcodec/apedec.c that will lead to remote denial of service via crafted input.


In Libav 12.3 a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format because srt_to_ass in libavcodec/srtdec.c has a complex format argument to sscanf.


In libming 0.4.8 the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.


In libming 0.4.8 a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability.


In libming 0.4.8 a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c which allows remote attackers to cause a denial of service via a crafted file.


In libming 0.4.8 there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a denial-of-service via a crafted swf file.


In libming 0.4.8 there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.


In LibSass 3.5.5 a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.


D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to cause a denial of service (daemon crash) via crafted LAN traffic.


TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.


TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520 3.16.6 Build 130529 and 3.16.4 Build 130205 allows remote attackers to cause a denial of service (httpd crash) via vectors involving a \new\ value in the isNew parameter to PingIframeRpm.htm.


TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp.


TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets as demonstrated by an \nmap -f\ command.


The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it related to net/unix/af_unix.c and net/unix/garbage.c.


The Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of service (kernel OOPS from null dereference) via fput in a 32-bit ioctl on 64-bit x86 systems an incomplete fix of CVE-2005-3044.1.


The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function aka the \do_mremap() mess\ or \mremap/mmap mess.\


The Linux kernel before 3.3.1 when KVM is used allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS related to the pmd_none_or_clear_bad function and page faults for huge pages.


The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain \ptrace corner cases\ that allow local users to cause a denial of service (crash) via crafted syscalls possibly related to MCA/INIT a different vulnerability than CVE-2005-1761.


The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero which allows local users to cause a denial of service (system crash) via a crafted application.


The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization which allows local users to cause a denial of service (system hang) via an application that executes code in a loop.


A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6 macOS Big Sur 11.5. Visiting a maliciously crafted webpage may lead to a system denial of service.


A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7 macOS Big Sur 11.5 Security Update 2021-004 Catalina Security Update 2021-005 Mojave. Processing a maliciously crafted image may lead to a denial of service.


A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1 Security Update 2021-008 Catalina macOS Big Sur 11.6.2. A malicious application may be able to cause a denial of service to Endpoint Security clients.


A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6. A remote attacker may be able to cause a denial of service.


The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3 3524p 2.0.0.48 and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device outage) via a long username.


In Long Range Zip (aka lrzip) 0.631 there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.


In Long Range Zip (aka lrzip) 0.631 there is a use-after-free in the lzma_decompress_buf function of stream.c which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.


In Long Range Zip (aka lrzip) 0.631 there is an infinite loop and application hang in the unzip_match function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.


In Long Range Zip (aka lrzip) 0.631 there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.


In Long Range Zip (aka lrzip) 0.631 there is a use-after-free in the ucompthread function (stream.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.


Apple Mac OS X Safari 2.0.3 1.3.1 and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.


Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call.


Apple Mac OS X kernel allows local users to cause a denial of service via a process that uses kevent to register a queue and an event then fork a child process that uses kevent to register an event for the same queue as the parent.


Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN ioctl command with a crafted data structure on an AppleTalk socket.


In Max Secure Anti Virus 19.0.3.019 the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019.


In Max Secure Anti Virus 19.0.3.019 the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011.


In Max Secure Anti Virus 19.0.3.019 the driver file (SDActMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019.


In Max Secure Anti Virus 19.0.3.019 the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22000d.


In Max Secure Anti Virus 19.0.3.019 the driver file (MaxCryptMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019.


In Max Secure Anti Virus 19.0.3.019 the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009.


Protection mechanism failure in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to enable a denial of service via local access.


Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.


The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denial of service (room unusability) by generating a large number of fictitious users to enter a meeting room.


A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) aka CID-128c66429247.


A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) aka CID-2289adbfa559.


A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) aka CID-c0a333d842ef.


A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures aka CID-0e62395da2bd.


A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures aka CID-bbe692e349e2.


A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures aka CID-ffdde5932042.


A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) aka CID-96c5c6e6a5b6.


A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures aka CID-fb5be6a7b486.


A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures aka CID-6402939ec86e.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

through

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures aka CID-fc739a058d99.


A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures aka CID-a7b2df76b42b.


A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures aka CID-c03b04dcdba1.


A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) aka CID-9c0530e898f3.


A memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to cause a denial of service (memory consumption) aka CID-a21b7f0cff19.


A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) aka CID-6f3ef5c25cc7.


A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) aka CID-ab612b1daf41.


A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) aka CID-728c1e2a05e4.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

before

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

aka


A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.


A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters which causes Apache to allocate 80 bytes for each linefeed.


A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.


Two

memory

leaks

in

the

function

in

in

the

Linux

kernel

through

allow

attackers

to

cause

a

denial

of

service

(memory

consumption)

aka


Four

memory

leaks

in

the

function

in

in

the

Linux

kernel

before

allow

attackers

to

cause

a

denial

of

service

(memory

consumption)

aka


Multiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial of service (memory consumption or device reload) by sending a crafted SIP message over (1) IPv4 or (2) IPv6 aka Bug IDs CSCuc42558 and CSCug25383.


Multiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to cause a denial of service (memory consumption) via unknown vectors.


Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.


Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.


Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).


Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets as demonstrated by the Striker ISAKMP Protocol Test Suite.


Multiple memory leaks in xsupplicant before 1.2.6 and possibly other versions allow attackers to cause a denial of service (memory consumption) via unspecified vectors.


Multiple memory leaks in Ulrik Petersen Emdros Database Engine before 1.2.0.pre231 allow local users to cause a denial of service (memory consumption) via unspecified vectors a different issue than CVE-2005-0415.


Multiple memory leaks in Hitachi Directory Server 2 P-2444-A124 before 02-11-/K on Windows and P-1B44-A121 before 02-10-/V on HP-UX allow remote attackers to cause a denial of service (memory consumption) via invalid LDAP requests.


Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service or (2) the NFS service.


Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.


Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.


Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations.


Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.


Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u 1.0.2 before 1.0.2i and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.


Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via malformed MQL statements.


Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to \error handling logic\.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000035.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000110.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000014c.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118.


In Micropoint proactive defense software 2.0.20266.0146 the driver file (mp110009.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170.


The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests which trigger the traversal of FSFS repository nodes.


On Moxa EDS-G508E EDS-G512E and EDS-G516E devices (with firmware through 6.0) denial of service can occur via PROFINET DCE-RPC endpoint discovery packets.


The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.


The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.


The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.


The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file.


The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.


The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file.


The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.


The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.


The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.


The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.


IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042


IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276.


IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance.


The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks.


Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request.


Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service (reboot) via unspecified vectors.


In Netwide Assembler (NASM) 2.14rc0 there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack because pointers associated with skip_white_ calls are not validated.


In Netwide Assembler (NASM) 2.14rc0 there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack because of a missing check for the relationship between minimum and maximum parameter counts.


In Netwide Assembler (NASM) 2.14rc0 there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack related to mishandling of operand-type errors.


In Netwide Assembler (NASM) 2.14rc0 there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.


In Netwide Assembler (NASM) 2.14rc0 there is a \SEGV on unknown address\ that will cause a remote denial of service attack because asm/preproc.c mishandles macro calls that have the wrong number of arguments.


In Netwide Assembler (NASM) 2.14rc0 there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.


In Netwide Assembler (NASM) 2.14rc0 there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.