A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).


A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.


A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.


A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.


A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.


A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.


A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.


A global buffer overflow issue in the dwarf::line_table::line_table function of Libelfin v0.3 allows attackers to cause a denial of service (DOS).


A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.


A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.


A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.


Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service (DoS).


Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).


Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).


Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).


Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).


Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user crafted input file via a Buffer Overflow during syntax parsing because strncat is misused.

denial of service
buffer overflow
escalated privilege


Stack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.


Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalation of privilege or denial of service.


A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c which allows attackers to cause a denial of service even code execution and escalation of privileges.


Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network.


All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the size input to memcpy() causing a buffer overflow leading to denial of service or potential escalation of privileges.


For the NVIDIA Quadro NVS and GeForce products NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x10000e9 where a value is passed from an user to the driver is used without validation as the size input to memcpy() causing a stack buffer overflow leading to denial of service or potential escalation of privileges.


For the NVIDIA Quadro NVS and GeForce products NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths leading to a denial of service or escalation of privileges.


Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107 15.45.30.5103 and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.


Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component \FrameworX.exe\ in the module \MSVCR100.dll\.

denial of service
buffer overflow
man in the middle


Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

denial of service
buffer overflow
memory corruption


Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.


Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver as used in Samsung S6 Edge allow local users to cause a denial of service (memory corruption) via a large (1) buffer or (2) size parameter.


Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.


Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.


The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.


Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc possibly 2.17 and earlier allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.


Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x 4.1.x and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.


Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request which triggers memory corruption. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Buffer overflow in net/ceph/auth_x.c in Ceph as used in the Linux kernel before 3.16.3 allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.


Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.


Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53 might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via a long string argument to the (1) DisplayName (2) AddGroup (3) InstallComponent or (4) Subscribe method. NOTE: this issue is not a vulnerability in many environments because the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.


Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.


Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib bibliography file.


Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X86_SETUP_MCE IOCTL request that specifies a large number of Machine Check Exception (MCE) banks.


The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers which might allow local users to cause a denial of service (buffer overflow and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.


In the Linux kernel before 4.12 Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.


Buffer overflow in the rx::TextureStorage11 class in ANGLE as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.


The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.


Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za 1.0.0 before 1.0.0m and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.


Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST which causes memory to be allocated for the reply data but not the reply structure.


Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5 Anti-Virus for Linux before 5.0.10 and other platforms before 4.11 when archive scanning is enabled allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.


Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SMS message triggering memory corruption when the \beginning\ buffer is copied to the third (pdu) argument.


The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v 1.0.0 before 1.0.0i and 1.0.1 before 1.0.1a does not properly interpret integer data which allows remote attackers to conduct buffer overflow attacks and cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted DER data as demonstrated by an X.509 certificate or an RSA public key.


Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks and cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted DER data as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.


Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to cause a denial of service (memory corruption and session termination) via long string values for unspecified parameters aka Bug ID CSCtg20751.


Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption denial of service comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13.


The shell subsystem contains a buffer overflow whereby an adversary with physical access to the device is able to cause a memory corruption resulting in denial of service or possibly code execution within the Zephyr kernel. See NCC-NCC-019 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.


drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write request as demonstrated by a voice_svc_send_req buffer overflow.


Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field a related issue to CVE-2008-4933.


Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field related to the hfsplus_cat_build_key_uni function.


Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.


Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44 as used in Perl before 5.15.6 might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string which triggers a heap-based buffer overflow.


Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request leading to a buffer overflow.


Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26 3.1 before 3.1.15 and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.


Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.


Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file related to buffers for (1) the channel floor and (2) the channel residue.


The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields which allows remote attackers to (1) cause a denial of service (integer underflow heap memory corruption and panic) via a small length value in data sent to a ROSE socket or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.


Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.


Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.


Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.


Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.

denial of service
buffer overflow
memory corruption
arbitrary code execution


Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.


Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted XML document.


Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response.


Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2 OS X before 10.11.5 and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 25812590.


Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages.


Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len (2) row or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.


Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted ABC.


Buffer overflow in the \read-string!\ procedure in the \extras\ unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a \#f\ value in the NUM argument.


Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16 T27 L10N before SP32_ORION111 and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ARF file aka Bug IDs CSCue74118 CSCub28371 CSCud23401 and CSCud31109.


Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16 T27 L10N before SP32_ORION111 and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DHT index value in JPEG data within a WRF file aka Bug ID CSCuc24503.


Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16 T27 L10N before SP32_ORION111 and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file aka Bug ID CSCuc27639.


Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16 T27 L10N before SP32_ORION111 and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted ARF file aka Bug IDs CSCue74147 and CSCub28383.


Heap-based

buffer

overflow

in

the

function

in

in

the

iSCSI

target

subsystem

in

the

Linux

kernel

through

allows

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

OOPS)

or

possibly

execute

arbitrary

code

via

a

long

key

that

is

not

properly

handled

during

construction

of

an

error-response

packet.


A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


Eltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.


Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI cur or .ico file which results in memory corruption when processing cursors animated cursors and icons a variant of CVE-2005-0416 as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so then CVE-2007-0038 should be preferred.


Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0 which triggers memory corruption when QuickTime assumes that a color table exists.


Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16 T28 before T28.12 and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file aka Bug IDs CSCui72223 CSCul01163 and CSCul01166.


Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16 T28 before T28.12 and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression aka Bug ID CSCuj87565.


Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16 T28 before T28.12 and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file aka Bug IDs CSCul87216 and CSCuj07603.


Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16 T28 before T28.12 and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio channel in a .wrf file aka Bug ID CSCuc39458.


Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.


Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25 3.2.x before 3.2.15 and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.


Buffer overflow in the \read-u8vector!\ procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a \#f\ value in the NUM argument.


Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11 Thunderbird before 3.0.9 and 3.1.x before 3.1.5 and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.


Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing Flash content with a crafted #1023 (3FFh) tag a different vulnerability than CVE-2010-1295 CVE-2010-2202 CVE-2010-2207 CVE-2010-2209 CVE-2010-2210 and CVE-2010-2211.


Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.


Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.


Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6 (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.


CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding which triggers a buffer overflow due to inconsistent length fields related to QDCA.


Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption.


Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested related to archive filenames that contain a : (colon) character.


Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk.


Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document aka FG-VD-10-005.


Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2 as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.


The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with an IFWV chunk with a size field of 0 which is used in the calculation of a file offset and causes invalid data to be used as a loop counter triggering a heap-based buffer overflow a different vulnerability than CVE-2010-2587 and CVE-2010-2588.


Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.


Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional Home and Lite 8.3.3 and 8.3.3.0054 allows user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a site list containing an entry with a long label.


Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.


Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3 Adobe Reader 8 and Acrobat 8 before 8.1.6 and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.


Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file.


Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3 Adobe Reader 8 and Acrobat 8 before 8.1.6 and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding.


Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.


Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9 as used in mysqld in MySQL 5.0.x before 5.0.90 MySQL 5.1.x before 5.1.43 MySQL 5.5.x through 5.5.0-m2 and other products allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.


Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors related to refreshing the server display surface.


Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HART reply.


Heap-based

buffer

overflow

in

the

ExponentialFunction::ExponentialFunction

function

in

Poppler

before

allows

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

crash)

or

possibly

execute

arbitrary

code

via

an

invalid

blend

mode

in

the

ExtGState

dictionary

in

a

crafted

PDF

document.


Multiple

vulnerabilities

in

Mozilla

Firefox

before

Thunderbird

before

and

SeaMonkey

before

allow

remote

attackers

to

cause

a

denial

of

service

(crash)

and

possibly

execute

arbitrary

code

via

Javascript

that

leads

to

memory

corruption

including

nsListControlFrame::FireMenuItemActiveEvent

buffer

overflows

in

the

string

class

in

out-of-memory

conditions

table

row

and

column

groups

\anonymous

box

selectors

outside

of

UA

stylesheets

stale

references

to

\removed

nodes

and

running

the

crypto.generateCRMFRequest

callback

on

deleted

context.


The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the StoreLicense function which triggers \memory corruption\ and possibly a buffer overflow.


Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.


Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012 when Internet Explorer is used allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a URI with a % (percent) character as its (1) last or (2) second-to-last character.


Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26 T27 LB through SP21 EP10 T27 LC before SP25 EP11 T27 LD before SP32 CP2 and T28 L10N before SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file aka Bug ID CSCtz72946.


Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52 kingMess.exe 65.20.2003.10400 in KingView 6.53 and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet.


Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0 Firefox ESR 10.x before 10.0.8 Thunderbird before 16.0 Thunderbird ESR 10.x before 10.0.8 and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28 and MariaDB 5.5.28a and possibly other versions allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code as demonstrated using certain variations of the (1) USE (2) SHOW TABLES (3) DESCRIBE (4) SHOW FIELDS FROM (5) SHOW COLUMNS FROM (6) SHOW INDEX FROM (7) CREATE TABLE (8) DROP TABLE (9) ALTER TABLE (10) DELETE FROM (11) UPDATE and (12) SET PASSWORD commands.


Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.


Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU when the guest NIC is configured to accept large packets allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.


Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4 as used in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.


Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4 as used in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.


Multiple buffer overflows in (1) internal/XMLReader.cpp (2) util/XMLURL.cpp and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.


Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP download request.


Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.


Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2 and possibly earlier versions allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.


Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field followed by a data string of that size aka attack 1 in ut3mendo.c.


The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4 Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header which triggers memory corruption and a buffer overflow.


Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array leading to memory corruption.


Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted (1) .grd or (2) .abr file a related issue to CVE-2010-1296.


Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.


IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted tSAC chunk which triggers a heap-based buffer overflow a different vulnerability than CVE-2011-2111 and CVE-2011-2116.


Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.


Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.


Buffer overflow in Microsoft Excel 2002 SP3 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet related to improper validation of record information aka \Excel Buffer Overrun Vulnerability.\


Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1 9.x before 9.4.2 and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a crafted length value a different vulnerability than CVE-2011-0563 and CVE-2011-0589.


Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14 and SeaMonkey before 2.0.12 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.


Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data in unspecified fields in the TRKM chunk in an Audition Session (aka .ses) file related to inconsistent use of character data types.


The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow a different vulnerability than CVE-2011-0556.


Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14 aka scsi-target-utils allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.


Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6 when CONFIG_XFS_DEBUG is disabled allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.


Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.


The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted component registration (CRG) marker segment in a JPEG2000 file.


Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Audition Session (aka .ses) file.


Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file.


Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file aka Bug ID CSCua61331.


Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.

denial of service
buffer overflow
out of bound read


Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).


Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.


Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.


Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.


Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.


Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.


Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34 5.5.x before 5.5.18 and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function related to an out-of-bounds read operation.


Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0 Firefox ESR 24.x before 24.5 Thunderbird before 24.5 and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.


Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read.


Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter which triggers an out-of-bounds read.


Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large length value which leads to a null dereference or out-of-bounds read.


The WPS UPnP function in hostapd when using WPS AP and wpa_supplicant when using WPS external registrar (ER) 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length which triggers an out-of-bounds read or heap-based buffer overflow.


sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31 5.6.x before 5.6.17 and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string as demonstrated by a long URI in a configuration with custom REQUEST_URI logging.


Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.


Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read memory leak and crash) via a crafted image.


Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command which triggers a one-byte buffer under-read and a one-byte buffer underflow.


Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.


The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\\n' and '\\r' characters which allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a crafted packet.


The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.


The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\\n' characters which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.


The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server (3) the mod_apreq2 module for the Apache HTTP Server or (4) an application that uses the libapreq2 library which triggers a heap-based buffer underflow.


The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file i.e. data is written to memory addresses before the beginning of the tmpBuf buffer.


AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types which causes a stack-based buffer underflow and out-of-bounds write leading to denial of service (application crash) or possibly unspecified other impact.


The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\\n' characters which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.


The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.


imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) via a crafted image related to imagew-bmp.c.


Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.


There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max <= G case.


There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max > G case.


In stroke_socket.c in strongSwan before 5.6.3 a missing packet length check could allow a buffer underflow which may lead to resource exhaustion and denial of service while reading from the socket.


Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image a different vulnerability than CVE-2008-2327.


Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.


Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

denial of service
buffer underflow
arbitrary code execution


Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.


Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.


The CCITTFax decoding filter in Ghostscript 8.60 8.61 and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.


Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.


Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.


The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted data that leads to a buffer underflow.


The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file which is used as an offset in a memcpy operation and leads to a buffer underflow.


Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.


Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier as used in Google Chrome before 23.0.1271.91 and other products allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.


Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PALM image a different vulnerability than CVE-2007-0770. NOTE: some of these details are obtained from third party information.


A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated remote attacker to trigger a reload of the affected device resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Version 2 (SSLv2) cannot be be used to exploit this vulnerability. An exploit could allow the attacker to cause a buffer underflow triggering a crash on an affected device. This vulnerability affects Cisco ASA Software and Cisco FTD Software that is running on the following Cisco products: Adaptive Security Virtual Appliance (ASAv) Firepower Threat Defense Virtual (FTDv) Firepower 2100 Series Security Appliance. Cisco Bug IDs: CSCve18902 CSCve34335 CSCve38446.


MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.


The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets aka Bug ID CSCup11309.


Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass authentication change configurations send messages and cause a denial of service (device restart) via unspecified vectors.


Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication obtain sensitive information or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c which trigger an \Off-by-two\ or \Out of bounds overwrite\ memory error.


The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true which allows remote attackers to read arbitrary files and consequently bypass authentication modify viewstate cause a denial of service or possibly have unspecified other impact via crafted XSL data.


Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp (2) apply_firmware_action.jsp and (3) file.jsp.


Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption) or make unauthorized files accessible by uploading files through requests to certain JSP scripts a related issue to CVE-2005-4332.


The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier and 8.8.x before 8.8.2 relies on client-side authentication which allows remote attackers to bypass authentication via requests for /SOAP URIs and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.


Sitefinity 5.1 5.2 5.3 5.4 6.x 7.x 8.x 9.x and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography.


In Modicon Quantum all firmware versions a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol.


admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login which allows remote attackers to cause a denial of service (loss of configuration data) and possibly perform direct static code injection via a saveGlobalconfig action.


In

in

Budabot

through

lax

syntax

validation

allows

remote

attackers

to

perform

a

command

injection

attack

against

the

PHP

daemon

with

a

crafted

command

resulting

in

a

denial

of

service

or

possibly

unspecified

other

impact

as

demonstrated

by

the

\!calc

x

command.

In

versions

before

has

the

vulnerable

code;

in

and

above

has

the

vulnerable

code.


Python

Software

Foundation

Python

(CPython)

version

contains

a

Improper

Neutralization

of

Special

Elements

used

in

a

Command

('Command

Injection')

vulnerability

in

shutil

module

function)

that

can

result

in

Denial

of

service

Information

gain

via

injection

of

arbitrary

files

on

the

system

or

entire

drive.

This

attack

appear

to

be

exploitable

via

Passage

of

unfiltered

user

input

to

the

function.

This

vulnerability

appears

to

have

been

fixed

in

after

commit


An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or delete arbitrary system files and impact the system's integrity or cause a denial of service condition. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14.


Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters which could let a remote malicious user cause a Denial of Service.


Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.

denial of service
cross site request forgery


Gadu-Gadu does not properly perform protocol handling which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified \crafted link \ possibly related to the gg protocol.


Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files as demonstrated by causing the user.config file to be moved leading to a denial of service (service stop) and possibly the exposure of sensitive information.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct denial of service attacks.


Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authentication of users for requests that (1) perform certain plugin actions and possibly cause a denial of service (disabled core plugins) via unknown vectors or (2) change the contact name and language or possibly have unspecified other impact via a crafted POST request to an account-user-*.php script.


Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post and consequently cause a denial of service (editing blockage) via a get-post-lock action.


Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service (stack consumption and daemon crash) via a malformed URL.


Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier as used in SIMATIC PCS7 and other products allows remote attackers to hijack the authentication of arbitrary users for requests that modify data or cause a denial of service.


A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java CloudSelectorParameter.java ConvertToTemplate.java ConvertToVm.java Delete.java DeleteSnapshot.java Deploy.java ExposeGuestInfo.java FolderVSphereCloudProperty.java PowerOff.java PowerOn.java Reconfigure.java Rename.java RenameSnapshot.java RevertToSnapshot.java SuspendVm.java TakeSnapshot.java VSphereBuildStepContainer.java vSphereCloudProvisionedSlave.java vSphereCloudSlave.java vSphereCloudSlaveTemplate.java VSphereConnectionConfig.java vSphereStep.java that allows attackers to perform form validation related actions including sending numerous requests to the configured vSphere server potentially resulting in denial of service or send credentials stored in Jenkins with known ID to an attacker-specified server (\test connection\).


Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service (disk consumption) via unspecified vectors.


WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery (CSRF) attacks via crafted cookies as demonstrated by attacks that (1) delete user accounts or (2) cause a denial of service (loss of application access). NOTE: this issue relies on the presence of an independent vulnerability that allows cookie injection.


Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG 1800HW 2071HG and 2700HG with firmware 3.17.5 3.7.1 4.25.19 or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that cause a denial of service (network outage) via a page parameter with a % (percent) character followed by a non-alphanumeric character.


Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to (1) cause a denial of service (device reboot) via the \Restart Cable Modem\ value in the BUTTON_INPUT parameter to configdata.html and (2) cause a denial of service (hard reset) via the \Reset All Defaults\ value in the BUTTON_INPUT parameter to configdata.html.


A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for Drupal because access to external resources with an SVG use element is mishandled.


A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress related to unlimited recursion for a '<use ... xlink:href=\#identifier\>' substring.


A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress related to potentially unwanted elements or attributes.


A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.


A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations.


A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3 macOS Mojave 10.14.3 watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.


A denial of service exists in gitlab <v12.3.2 <v12.2.6 and <v12.1.10 that would let an attacker bypass input validation in markdown fields take down the affected page.


A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.


A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possibly trigger an assertion failure causing nbdkit to exit. This issue only affected nbdkit versions 1.12.7 1.14.1 and 1.15.1.


A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.


A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4 tvOS 12.4 watchOS 5.3. Processing a maliciously crafted image may lead to a denial of service.


A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4 watchOS 5.3. A remote attacker may cause an unexpected application termination.


A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10 that could allow service log file to be written to non-standard locations.


A denial of service issue was addressed with improved input validation.


A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.


A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s 7.01 SR1 7.02 SP06 and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN.


A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.


A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.


A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.


A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.


A denial of service vulnerability was reported in Lenovo PCManager prior to version 3.0.400.3252 that could allow configuration files to be written to non-standard locations.


A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.


Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.


A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.


A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username.


A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources.


A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or merge request


A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a very long issue or merge request description


A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server.


A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.


A Denial of Service issue exists in China Telecom Corporation EPON Tianyi Gateway ZXHN F450(EPON ONU) 3.0. Tianyi Gateway is a hardware terminal of \Optical Modem Smart Router.\ Attackers can use this vulnerability to restart the device multiple times.


A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.


A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL.


A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.


A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.


A

Denial

of

Service

vulnerability

exists

in

Binaryen

due

to

an

assertion

abort

in

wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).


A

Denial

of

Service

vulnerability

exists

in

Binaryen

due

to

an

assertion

abort

in


A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.


SymCrypt Denial of Service Vulnerability


A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function


A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock.


Windows Denial of Service Vulnerability


Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1. A remote attacker can cause a device to unexpectedly restart.


Possible denial of service due to improper validation of DNS response when DNS client requests with PTR NAPTR or SRV query type in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT


A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000 which could allow low privileged users to overwrite protected system files.


Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto Snapdragon Industrial IOT Snapdragon Mobile


A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.


A Denial of Service vulnerability exists in Google Android 4.4.4 5.0.2 and 5.1.1 which allows malicious users to block Bluetooh access (Android Bug ID A-28672558).


A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery)


A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash.


A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7 14.8.0 to 14.8.5 and 14.9.0 to 14.9.2 allows an attacker to crash the GitLab web application with a maliciously crafted RDoc file


YARP Denial of Service Vulnerability.


A denial of service vulnerability exists in the netserver recv_command functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted network request can lead to a reboot. An attacker can send a malicious packet to trigger this vulnerability.


.NET Denial of Service Vulnerability.


Unknown \Denial of Service Attack\ vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to cause a denial of service (CPU consumption in URC host service).


A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.


A

denial

of

service

vulnerability

in

the

Android

media

framework

Product:

Android.

Versions:

Android

ID


A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865.


A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.


A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0 6.0.1. Android ID: A-71567394.


A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-62537081.


A

denial

of

service

vulnerability

in

the

Android

media

framework.

Product:

Android.

Versions:

Android

ID:


A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-36724453.


A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-38239864.


A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34203195.


A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID: A-38115076.


A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-37627194.


A

denial

of

service

vulnerability

in

the

Android

framework.

Product:

Android.

Versions:

Android

ID:


A

denial

of

service

vulnerability

in

the

Android

media

framework

(libhevc).

Product:

Android.

Versions:

Android

ID:


A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2 5.1.1 6.0. Android ID: A-62815506.


A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36819262.


A denial of service vulnerability in the Android media framework (hevc decoder). Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37469795.


A denial of service vulnerability in the Android media framework (h264 decoder). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36279112.


A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-38014992.


A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35584425.


A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34231231.


A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-37624243.


A denial of service vulnerability in the Android runtime (android messenger). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID: A-37742976.


A

denial

of

service

vulnerability

in

the

Android

media

framework

(libstagefright).

Product:

Android.

Versions:

Android

ID:


A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID A-65646012.


A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37207120.


A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-36531046.


A

denial

of

service

vulnerability

in

the

Android

media

framework.

Product:

Android.

Versions:

Android

ID:


A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-38487564.


A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries aka \Active Directory Denial of Service Vulnerability.\


A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-38391487.


A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36993291.


A

denial

of

service

vulnerability

in

the

Android

framework

(syncstorageengine).

Product:

Android.

Versions:

Android

ID:


A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID A-63315932.


A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35583675.


A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-34778578.


A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading to a cascading denial of services.


A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.


A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.


A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups leading to excessive memory usage and the process to restart.


A Denial of Service vulnerability exists in ircd-ratbox 3.0.9 in the MONITOR Command Handler.


A denial of service vulnerability exists in Jenkins 2.137 and earlier 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.


A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a TCP connection.


A denial of service vulnerability exists in Skype for Business aka \Microsoft Skype for Business Denial of Service Vulnerability.\ This affects Office 365 ProPlus Microsoft Office Microsoft Lync Skype.


A denial of service vulnerability exists when OData Library improperly handles web requests aka \OData Denial of Service Vulnerability.\ This affects Microsoft.Data.OData.


An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory aka \WEBDAV Denial of Service Vulnerability.\ This affects Windows 10 Servers Windows 10.


A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests aka \System.IO.Pipelines Denial of Service.\ This affects .NET Core 2.1 System.IO.Pipelines ASP.NET Core 2.1.


Addresses denial of service attack to eDirectory versions prior to 9.1.


A denial of service vulnerability exists in Jenkins 2.153 and earlier LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.


A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12.1 macOS Mojave 10.14.1 tvOS 12.1 watchOS 5.1.


A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12 macOS Mojave 10.14 tvOS 12 watchOS 5.


A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.


A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1 watchOS 4.3.2.


A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1 macOS Mojave 10.14.2 tvOS 12.1.1 watchOS 5.1.2.


A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.


A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.


A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.


A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations.


A denial of service vulnerability was reported in Lenovo PCManager prior to version 3.0.200.2042 that could allow configuration files to be written to non-standard locations.


A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.


A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.


A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection.


A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request.


A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x 3.9.x and 4.x released before April 7 2020 could allow remote attackers to submit data which can lead to resource exhaustion.


A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets aka 'Windows TCP/IP Denial of Service Vulnerability'.


A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table as demonstrated in readeif.


A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.


A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory aka 'Microsoft Outlook Denial of Service Vulnerability'.


A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests aka 'Windows Remote Desktop Service Denial of Service Vulnerability'.


A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit availability of GateManager instances.


A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileged user on a guest operating system aka 'Hyper-V Denial of Service Vulnerability'.


A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links aka 'Windows Tile Object Service Denial of Service Vulnerability'.


A denial of service vulnerability exists when ASP.NET Core improperly handles web requests aka 'ASP.NET Core Denial of Service Vulnerability'.


A denial of service vulnerability exists when Windows improperly handles hard links aka 'Microsoft Windows Denial of Service Vulnerability'.


A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.


A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries aka 'Windows DNS Denial of Service Vulnerability'.


A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries aka 'Windows DNS Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1228.


A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.


A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries aka 'Windows DNS Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0836.


A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations aka 'Windows Registry Denial of Service Vulnerability'.


A denial of service vulnerability exists in the way that the WalletService handles files aka 'Windows WalletService Denial of Service Vulnerability'.


A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'.


A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input aka 'Bond Denial of Service Vulnerability'.


A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests aka '.NET Core & .NET Framework Denial of Service Vulnerability'.


A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files aka 'Microsoft SQL Server Management Studio Denial of Service Vulnerability'.


A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests aka 'Windows SMBv3 Client/Server Denial of Service Vulnerability'.


A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause lmadmin to crash.


A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1


A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.


A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409.


A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.