An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in ros_comm via a crafted XMLRPC call.


A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c which could cause a denial of service (context-dependent).


TensorFlow

is

an

end-to-end

open

source

platform

for

machine

learning.

In

affected

versions

an

attacker

can

trigger

a

denial

of

service

via

a

segmentation

fault

in

caused

by

missing

validation.

The

misses

some

validation

for

the

and

tensors.

The

fixes

for

were

incomplete.

We

have

patched

the

issue

in

GitHub

commit

The

fix

will

be

included

in

TensorFlow

We

will

also

cherrypick

this

commit

on

TensorFlow

TensorFlow

and

TensorFlow

as

these

are

also

affected

and

still

in

supported

range.


A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function which causes a Denial of Service (context-dependent).


A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function which causes a Denial of Service.


FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully and malicious users may use this to achieve double-spending attacks.


An issue was discovered in MediaWiki before 1.35.5 1.36.x before 1.36.3 and 1.37.x before 1.37.1. A denial of service (resource consumption) can be accomplished by searching for a very long key in a Language Name Search.


A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra which causes a Denial of Service (context-dependent).


A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function which causes a Denial of Service.


A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function which could cause a Denial of Service (context-dependent).


A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra which causes a Denial of Service (context-dependent).


A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function which causes a Denial of Service.


A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function which could cause a Denial of Service.


A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function which could cause a Denial of Service. .


Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability leading to a denial of service over SMB.


report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.


libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file using cjxl an attacker can trigger a denial of service.


When reading a specially crafted ZIP archive Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.


Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to deny access to the iDRAC webserver.


Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service.


A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges potentially resulting in a denial of service and data loss in all versions of Sophos SSL VPN client.


uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).


An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow an attacker who controls the producer of XML reports consumed by FortiPortal to trigger a denial of service or read arbitrary files from the underlying file system by means of specifically crafted XML documents.


Windows Installer Denial of Service Vulnerability


An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).


A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0 version 6.3.15 and below 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests


Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests.


XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.


libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codec_apng.cc jxl::DecodeImageAPNG(). When encoding a malicous APNG file using cjxl an attacker can trigger a denial of service.


An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function derive_boundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash which leads to remote denial of service.


Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.


A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially crafted license blobs.


Windows TCP/IP Denial of Service Vulnerability


A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.


Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application.


A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability.


httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0 a malicious server which responds with long series of \\\xa0\ characters in the \www-authenticate\ header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library.


Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0 a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.


A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.


On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.


Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.


XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16 there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework you will have to use at least version 1.4.16.


Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop using CPU and potentially preventing other SmartConnect DNS responses.


Marked is an open-source markdown parser and compiler (npm package \marked\). In marked from version 1.1.1 and before version 2.0.0 there is a Regular expression Denial of Service vulnerability. This vulnerability can affect anyone who runs user generated code through marked. This vulnerability is fixed in version 2.0.0.


SAP Business Warehouse versions 700 701 702 711 730 731 740 750 782 and SAP BW/4HANA versions 100 200 allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious ABAP report which could be used to get access to sensitive data to inject malicious UPDATE statements that could have also impact on the operating system to disrupt the functionality of the SAP system which can thereby lead to a Denial of Service.


Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status retrieval page also affecting other users that would have normally access to the same subset of job details


Dell EMC NetWorker 19.4 or older contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces leading to denial of service in the manageability path.


PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP SDP RTP STUN TURN and ICE. In PJSIP version 2.10 and earlier after an initial INVITE has been sent when two 183 responses are received with the first one causing negotiation failure a crash will occur. This results in a denial of service.


A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability.


is

a

command-line

utility

and

C++

library

for

reading

writing

deleting

and

modifying

the

metadata

of

image

files.

The

assertion

failure

is

triggered

when

is

used

to

modify

the

metadata

of

a

crafted

image

file.

An

attacker

could

potentially

exploit

the

vulnerability

to

cause

a

denial

of

service

if

they

can

trick

the

victim

into

running

on

a

crafted

image

file.

Note

that

this

bug

is

only

triggered

when

modifying

the

metadata

which

is

a

less

frequently

used

operation

than

reading

the

metadata.

For

example

to

trigger

the

bug

in

the

command-line

application

you

need

to

add

an

extra

command-line

argument

such

as

`fi`.

Patches

The

bug

is

fixed

in

version

References

Regression

test

and

bug

fix:

For

more

information

Please

see

our

security

for

information

about

security.


OpenProject is open-source web-based project management software. In versions prior to 11.3.3 the `MessagesController` class of OpenProject has a `quote` method that implements the logic behind the Quote button in the discussion forums and it uses a regex to strip `<pre>` tags from the message being quoted. The `(.|\\s)` part can match a space character in two ways so an unterminated `<pre>` tag containing `n` spaces causes Ruby's regex engine to backtrack to try 2n states in the NFA. This will result in a Regular Expression Denial of Service. The issue is fixed in OpenProject 11.3.3. As a workaround one may install the patch manually.


An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment.


SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).


Vapor is a web framework for Swift. In versions 4.47.1 and prior bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server memory and/or crashing the server (Denial of Service) for applications where untrusted data can end up in said function. Vapor does not currently use this function itself so this only impact applications that use the impacted function directly or through other dependencies. The vulnerability is patched in version 4.47.2. As a workaround one may use an alternative to Vapor's built-in `Data.init(base32Encoded:)`.


Exiv2 is a command-line utility and C++ library for reading writing deleting and modifying the metadata of image files. An inefficient algorithm (quadratic complexity) was found in Exiv2 versions v0.27.3 and earlier. The inefficient algorithm is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.4. Note that this bug is only triggered when _writing_ the metadata which is a less frequently used Exiv2 operation than _reading_ the metadata. For example to trigger the bug in the Exiv2 command-line application you need to add an extra command-line argument such as `rm`.


Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack which allows an attacker to easily execute a (seemingly permanent) denial of service attack essentially taking down Opencast using a single HTTP request. To exploit this users need to have ingest privileges limiting the group of potential attackers The problem has been fixed in Opencast 9.6. There is no known workaround for this issue.


SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).


Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface which Contour normally prevents from access outside the Envoy container. This can be used to shut down Envoy remotely (a denial of service) or to expose the existence of any Secret that Envoy is using for its configuration including most notably TLS Keypairs. However it *cannot* be used to get the *content* of those secrets. Since this attack allows access to the administration interface a variety of administration options are available such as shutting down the Envoy or draining traffic. In general the Envoy admin interface cannot easily be used for making changes to the cluster in-flight requests or backend services but it could be used to shut down or drain Envoy change traffic routing or to retrieve secret metadata as mentioned above. The issue will be addressed in Contour v1.18.0 and a cherry-picked patch release v1.17.1 has been released to cover users who cannot upgrade at this time. For more details refer to the linked GitHub Security Advisory.


An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions.


sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\\r\\n' in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround don't use the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. The issues has been fixed in sqlparse 0.4.2.


mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party authenticating users against an OpenID Connect Provider. When mod_auth_openidc versions prior to 2.4.9 are configured to use an unencrypted Redis cache (`OIDCCacheEncrypt off` `OIDCSessionType server-cache` `OIDCCacheType redis`) `mod_auth_openidc` wrongly performed argument interpolation before passing Redis requests to `hiredis` which would perform it again and lead to an uncontrolled format string bug. Initial assessment shows that this bug does not appear to allow gaining arbitrary code execution but can reliably provoke a denial of service by repeatedly crashing the Apache workers. This bug has been corrected in version 2.4.9 by performing argument interpolation only once using the `hiredis` API. As a workaround this vulnerability can be mitigated by setting `OIDCCacheEncrypt` to `on` as cache keys are cryptographically hashed before use when this option is enabled.


Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests.


EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC window to change its title repeatedly at high speed which results in many SetWindowTextA or SetWindowTextW calls. In other words it does not implement a usleep or similar delay upon processing a title change.


Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.


wire-ios is the iOS version of Wire an open-source secure messaging app. In wire-ios versions 3.8.0 and prior a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains the \ character it will cause the iOS client to crash. The vulnerability is patched in wire-ios version 3.8.1.


A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.


Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3 3.12.2 and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3 3.12.2 and 3.13.


Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable a maliciously crafted template may result in uncontrolled resource consumption leading to denial of service when matched against a URI. In typical usage templates would not normally be read from untrusted user input but nonetheless no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2.8.0. As a workaround only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.


SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.


Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to DRAINING when it receives a SETTING frame with the SETTINGS_MAX_CONCURRENT_STREAMS parameter set to 0. Receiving these two frames in the same I/O event results in abnormal termination of the Envoy process due to invalid state transition from CLOSED to DRAINING. A sequence of H/2 frames delivered by an untrusted upstream server will result in Denial of Service in the presence of untrusted **upstream** servers. Envoy versions 1.19.1 1.18.4 contain fixes to stop processing of pending H/2 frames after connection transition to the CLOSED state.


An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process leading to denial of service.


An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service.


The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensus chain reorganizations) even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall or an increase in the profits of individual validators.


Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability


TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.


An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files.


The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service (indefinite stalling of consensus decisions).


XML External Entity (XXE) vulnerability in the file based service provider creation feature of the Management Console in WSO2 API Manager 2.6.0 3.0.0 3.1.0 3.2.0 and 4.0.0; and WSO2 IS as Key Manager 5.7.0 5.9.0 and 5.10.0; and WSO2 Identity Server 5.7.0 5.8.0 5.9.0 5.10.0 and 5.11.0. Allows attackers to gain read access to sensitive information or cause a denial of service via crafted GET requests.


Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.


The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus decisions) and also increase the profits of individual validators via short-range reorganizations of the underlying consensus chain.


Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments.


In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701 702 711 730 731 740 750 751 752 753 754 755 756 786 an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.


The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5 10.0.0-M1 to 10.0.11 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that over time could lead to a denial of service via an OutOfMemoryError.


XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.


Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted application to cause permanent denial of service.


An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash Exit or Restart).


Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.


An improper binary stream data handling issue was found in the core module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug an attacker is able to produce a denial of service attack that can eventually shut down the target server.


An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files which allows attackers to cause a crash potentially enabling denial of service (crash exit or restart).


Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.


Assuming a shell privilege is gained an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset.


A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection.


A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.


MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.


The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety of IOCTLs which allowed an attacker to cause a denial of service.


Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.


ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371 allows an unauthenticated remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919.


Assuming a shell privilege is gained an improper exception handling for multi_sim_bar_hide_by_meadia_full value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset.


An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.


Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.


An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash Exit or Restart).


Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.


An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series version 1.1 improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.


Skype for Business and Lync Denial of Service Vulnerability


The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating allowing submission of long integer causing a Denial of Service in the comments section or pending comment dashboard depending if the user sent it as unauthenticated or authenticated.


.NET Framework Denial of Service Vulnerability


Windows Console Driver Denial of Service Vulnerability


Windows Trust Verification API Denial of Service Vulnerability


Windows TCP/IP Denial of Service Vulnerability


The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating allowing submission of long integer causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page


Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability.


Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with \runtime error: invalid memory address or nil pointer dereference\ and arise a SEGV signal.


Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.


Mercurius

is

a

GraphQL

adapter

for

Fastify.

Any

users

from

to

are

subjected

to

a

denial

of

service

attack

by

sending

a

malformed

JSON

to

`/graphql`

unless

they

are

using

a

custom

error

handler.

The

vulnerability

has

been

fixed

in

and

shipped

as

As

a

workaround

users

may

use

a

custom

error

handler.


Solidus is a free open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4 3.0.4 and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential backtracking through a fragment like `a.a.` Versions 3.1.4 3.0.4 and 2.11.13 have been patched to use a different regular expression. The maintainers added a check for email addresses that are no longer valid that will print information about any affected orders that exist. If a prompt upgrade is not an option a workaround is available. It is possible to edit the file `config/application.rb` manually (with code provided by the maintainers in the GitHub Security Advisory) to check email validity.


Envoy is an open source edge and service proxy designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vector. The only workaround is to not use regex in the JWT filter. Users are advised to upgrade.


In Canon LBP223 printers the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background creating a denial of service vulnerability.


Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to denial of service.


A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0 version 6.2.9 and below version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.


Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of Service attack via the `/message-bus/_diagnostics` path. The impact of this vulnerability is greater on multisite Discourse instances (where multiple forums are served from a single application server) where any admin user on any of the forums are able to visit the `/message-bus/_diagnostics` path. The problem has been patched. Please upgrade to 2.8.0.beta10 or 2.7.12. No workarounds for this issue exist.


XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. XStream 1.4.19 monitors and accumulates the time it takes to add elements to collections and throws an exception if a set threshold is exceeded. Users are advised to upgrade as soon as possible. Users unable to upgrade may set the NO_REFERENCE mode to prevent recursion. See GHSA-rmr5-cpv2-vgjf for further details on a workaround if an upgrade is not possible.


DirectX Graphics Kernel File Denial of Service Vulnerability


Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).


PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs on Linux or other platforms for similar reasons.


SAP NetWeaver AS for Java (Http Service Monitoring Filter) versions - 7.10 7.11 7.20 7.30 7.31 7.40 7.50 allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to denial of service vulnerability.


Improper resource shutdown or release in firmware for some Intel(R) SSD Intel(R) SSD DC Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a privileged user to potentially enable denial of service via local access.


VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system.


Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket strcmp becomes slow. This is fixed in 3.4.2 3.2.8 and 3.0.16.


Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).


Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.


An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component the authority regular expression exhibits catastrophic backtracking causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.


Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.


Windows LSA Denial of Service Vulnerability


An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.


The server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion of many fake records related to COVID-19) because Phone Number data lacks a digital signature.


Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected.


Improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.


golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.


The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller leading to a denial of service (application crash) or possibly unspecified other impact.


A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions) SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions) SIMATIC CP 343-1 ERPC (All versions) SIMATIC CP 343-1 Lean (incl. SIPLUS variants) (All versions) SIMATIC CP 443-1 (incl. SIPLUS variants) (All versions) SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) (All versions). Sending a specially crafted packet to port 102/tcp of an affected device could cause a denial of service condition. A restart is needed to restore normal operations.


EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system.


Windows AF_UNIX Socket Provider Denial of Service Vulnerability


Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message in multi-user chat where the message ID equals the correction ID.


ECOA BAS controller suffers from a path traversal vulnerability causing arbitrary files deletion. Using the specific GET parameter unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario.


Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag cvxopt.cholmod.getfactor cvxopt.cholmod.solve cvxopt.cholmod.spsolve) which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.


MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.


Apache Tomcat 8.5.0 to 8.5.63 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service.


TensorFlow is an open source platform for machine learning. In affected versions the code behind `tf.function` API can be made to deadlock when two `tf.function` decorated Python functions are mutually recursive. This occurs due to using a non-reentrant `Lock` Python object. Loading any model which contains mutually recursive functions is vulnerable. An attacker can cause denial of service by causing users to load such models and calling a recursive `tf.function` although this is not a frequent scenario. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1 TensorFlow 2.5.2 and TensorFlow 2.4.4 as these are also affected and still in supported range.


Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of service for a heavily used server. The issue has been fixed in wire-server 2022-03-01 and is already deployed on all Wire managed services. On premise instances of wire-server need to be updated to 2022-03-01 so that their backends are no longer affected. There are no known workarounds for this issue.


Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability which can be exploited by attackers to cause a denial of service.


Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message must be sent from an authenticated agent to the manager.


MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.


Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10 allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.


In wifi driver there is a possible system crash due to a missing validation check. This could lead to remote denial of service from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20190426015; Issue ID: GN20190426015.


** DISPUTED ** RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data. NOTE: It is asserted that this issue requires social engineering a user into connecting to a fake VNC Server. The VNC Viewer application they are using will then hang until terminated but no memory leak occurs - the resources are freed once the hung process is terminated and the resource usage is constant during the hang. Only the process that is connected to the fake Server is affected. This is an application bug not a security issue.


TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result attackers can trigger denial of service (via dereferencing `nullptr`s or via `CHECK`-failures) as well as abuse undefined behavior (binding references to `nullptr`s). An attacker can also read and write from heap buffers depending on the API that gets used and the arguments that are passed to the call. Given that the boosted trees implementation in TensorFlow is unmaintained it is recommend to no longer use these APIs. We will deprecate TensorFlow's boosted trees APIs in subsequent releases. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1 TensorFlow 2.5.2 and TensorFlow 2.4.4 as these are also affected and still in supported range.


TensorFlow is an open source platform for machine learning. In affected versions the implementation of `tf.math.segment_*` operations results in a `CHECK`-fail related abort (and denial of service) if a segment id in `segment_ids` is large. This is similar to CVE-2021-29584 (and similar other reported vulnerabilities in TensorFlow localized to specific APIs): the implementation (both on CPU and GPU) computes the output shape using `AddDim`. However if the number of elements in the tensor overflows an `int64_t` value `AddDim` results in a `CHECK` failure which provokes a `std::abort`. Instead code should use `AddDimWithStatus`. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1 TensorFlow 2.5.2 and TensorFlow 2.4.4 as these are also affected and still in supported range.


FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. FreeSWITCH prior to version 1.10.7 is susceptible to Denial of Service via SIP flooding. When flooding FreeSWITCH with SIP messages it was observed that after a number of seconds the process was killed by the operating system due to memory exhaustion. By abusing this vulnerability an attacker is able to crash any FreeSWITCH instance by flooding it with SIP messages leading to Denial of Service. The attack does not require authentication and can be carried out over UDP TCP or TLS. This issue was patched in version 1.10.7.


HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in 1.1.6.


In versions 1.6 to 2.0.11 of Eclipse Mosquitto an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage leading to a loss of performance and possible denial of service.


PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP SDP RTP STUN TURN and ICE. In various parts of PJSIP when error/failure occurs it is found that the function returns without releasing the currently held locks. This could result in a system deadlock which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.


ASP.NET Denial of Service Vulnerability


The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication.


An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.


The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.


Pexip Infinity 25.x before 25.4 has Improper Input Validation and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface.


An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash Exit or Restart) or possible code execution.


Windows Desktop Bridge Denial of Service Vulnerability


XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.


An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki usernames with trailing whitespace could be stored in the cu_log database table such that denial of service occurred for certain CheckUser extension pages and functionality. For example the attacker could turn off Special:CheckUserLog and thus interfere with usage tracking.


Microsoft Defender Denial of Service Vulnerability


The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets.


An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.


Server for NFS Denial of Service Vulnerability


net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server Transport and Client can each be affected in some configurations.


Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125 which makes it easier for attackers to trigger a loss of funds or a denial of service attack against downstream projects such as Lightning network nodes. An unconfirmed child transaction with nSequence = 0xff_ff_ff_ff spending an unconfirmed parent with nSequence <= 0xff_ff_ff_fd should be replaceable because there is inherited signaling by the child transaction. However the actual PreChecks implementation does not enforce this. Instead mempool rejects the replacement attempt of the unconfirmed child transaction.


avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE) not the upstream Avahi product.


Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.


Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.


User Profile Service Denial of Service Vulnerability


TOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a DMA (Direct Memory Access) to invalid DRAM address that could result in denial of service.


A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources resulting in a denial of service condition.


Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.


Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.


.NET Core and Visual Studio Denial of Service Vulnerability


Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.


A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later.


Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.


Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.


Windows NAT Denial of Service Vulnerability


Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.


Azure Sphere Denial of Service Vulnerability


Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.


Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.


An issue was discovered in Xen through 4.11.x allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565.


LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.


ua-parser-js >= 0.7.14 fixed in 0.7.24 uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header ua-parser-js will get stuck processing it for an extended period of time.


The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five hours) by making five invalid login attempts to a victim's account.


The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.


The Integration Builder Framework of SAP Process Integration versions - 7.10 7.11 7.20 7.30 7.31 7.40 7.50 does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and upload it to the application which could lead to denial of service and impact the availability of the application.


Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container and thus an attempted memory allocation can be very large.


User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal matter with the Sametime chat application users hold a cookie containing their session ID (SID). This value is also used when sending chat messages receiving notifications and/or transferring files.


Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability someone must open a crafted PDF file.


A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code) for an attacker within radio range.


SAP NetWeaver AS ABAP versions - 700 701 702 730 731 allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data overwrite them or execute a denial of service.


archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any filename.


The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpected valid HTTP request such as OPTIONS. This occurs because the HTTP request handler enters a miscoded wbs_loop() debugger hook.


An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2 allows attackers to cause a denial of service via a crafted XLS file.


Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container and thus an attempted memory allocation can be very large.


In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.


An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP versions - 731 740 750 allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the Availability of the SAP system.


The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33 when processing a request for netgroup lookup may crash due to a double-free potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.


ssri 5.2.2-8.0.0 fixed in 8.0.1 processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process leading to denial of service. This issue only affects consumers using the strict option.


Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container and thus an attempted memory allocation can be very large.


The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g. in the Persian language) into a channel or group. The crash occurs in MtProtoKitFramework.


A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4 Security Update 2021-003 Catalina Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to perform denial of service.


Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music


VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function in which a crafted file can cause a denial of service.


On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance crafted OPC packets can cause an OPC enforcer denial of service.


OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service (connectivity outage) via crafted tcp/20499 packets to the CTRL Ethernet port.


md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory and cause a denial of service via a malformed Markdown document.


An assertion abort was found in upx MemBuffer::alloc() in mem.cpp in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.


Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Voice & Music Snapdragon Wearables


In Pure-FTPd before 1.0.50 an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. (Versions 1.0.23 through 1.0.49 are affected.)


A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108 which allows an attacker to prevent legitimate users from accessing a service either by crashing or flooding the service which can lead to denial of service. The vulnerability is related to Android implementation methods that are widely used across Android mobile applications and such methods are embedded into the SAP SuccessFactors mobile application. These Android methods begin executing once the user accesses their profile on the mobile application. While executing it can also pick up the activities from other Android applications that are running in the background of the users device and are using the same types of methods in the application. Such vulnerability can also lead to phishing attacks that can be used for staging other types of attacks.


In Apache James using Jazzer fuzzer we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher which enforce the use of RE2J regular expression engine to execute regex in linear time without back-tracking.


Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c when using mp4box which causes a denial of service.


A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to prevent users from logging in. An attacker can send an HTTP request to trigger this vulnerability.


A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c which causes a denial of service.


In Apache James while fuzzing with Jazzer the IMAP parsing stack we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used for a Denial Of Service attack. The IMAP user needs to be authenticated to exploit this vulnerability. This affected Apache James prior to version 3.6.1. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade.


A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box which causes a denial of service.


A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of HTTP requests can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.


An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1 17.x before 17.2.1 and 18.x before 18.1.1. By making API requests involving nonexistent controllers an authenticated user may cause the API worker to consume increasing amounts of memory resulting in API performance degradation or denial of service.


Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to achieve server-side denial of service.


In Contiki 3.0 Telnet option negotiation is mishandled. During negotiation between a server and a client the server may fail to give the WILL/WONT or DO/DONT response for DO and WILL commands because of improper handling of exception condition which leads to property violations and denial of service. Specifically a server sometimes sends no response because a fixed buffer space is available for all responses and that space may have been exhausted.


Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a \Billion Laughs\ entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.


Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handling the Apple GymKit communication. This can lead to an Apple MFI device not being able to authenticate with the Peleton Bike


Windows NAT Denial of Service Vulnerability


The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.


Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.


Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt aka the \Malformed Media License Request\ Vulnerability.


The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets which allows remote attackers to cause a denial of service.


The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service aka \Inter-module Communications Bypass.\


The guestbook CGI program in ICQ Web Front service for ICQ 2000a 99b and others allows remote attackers to cause a denial of service via a URL with a long name parameter.


FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.


Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.


The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface which causes the device to crash.


The \capabilities\ feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges aka the \Linux kernel setuid/setcap vulnerability.\


SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.


NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost).


The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.


XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000.


The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser aka the \ResetBrowser Frame\ vulnerability.


The SyGate Remote Management program does not properly restrict access to its administration service which allows remote attackers to cause a denial of service or access network traffic statistics.


Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.


Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests which allows remote attackers to cause a denial of service via a malformed request.


Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.


Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.


An administrative script from IIS 3.0 later included in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by accessing the script without a particular argument aka the \Absent Directory Browser Argument\ vulnerability.


ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.


Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port aka the \NetMeeting Desktop Sharing\ vulnerability.


The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.


RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.


IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long complex URL that appears to contain a large number of file extensions aka the \Malformed Extension Data in URL\ vulnerability.


The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence aka the \Misordered Windows Media Services Handshake\ vulnerability.


The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request which allows remote attackers to cause a denial of service.


FirstClass Internet Services server 5.770 and other versions before 6.1 allows remote attackers to cause a denial of service by sending an email with a long To: mail header.


The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.


The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.


HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.


IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.


Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET HEAD or POST requests and closing the connection before the server responds to the requests.


Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros which causes the server to crash.


X fontserver xfs allows local users to cause a denial of service via malformed input to the server.


xterm Eterm and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.


CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files which allows a remote attacker to cause a denial of service.


Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.


Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length.


LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.


Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.


RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.


AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.


ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.


The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.


Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets.


LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.


OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.


BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.


RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets which causes the server to crash.


Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.


Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports which significantly increases the CPU utilization.


Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service.


ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.


Worm HTTP server allows remote attackers to cause a denial of service via a long URL.


CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password.


The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.


libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0 which causes libX11 to go into an infinite loop.


HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting which allows attackers to cause a denial of service or conduct unauthorized activities.


Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.


NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter.


HP asecure creates the Audio Security File audio.sec with insecure permissions which allows local users to cause a denial of service or gain additional privileges.


BitchX IRC client does not properly cleanse an untrusted format string which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.


The NetBIOS Name Server (NBNS) protocol does not perform authentication which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram aka the \NetBIOS Name Server Protocol Spoofing\ vulnerability.


GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.


Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic aka the \Local Security Policy Corruption\ vulnerability.


Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.


Kerberos 4 KDC program improperly frees memory twice (aka \double-free\) which allows remote attackers to cause a denial of service.


The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345 which raises CPU utilization to 100%.


named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server aka the \srv bug.\


Dragon telnet server allows remote attackers to cause a denial of service via a long username.


The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.


Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files which allows attackers to cause a denial of service.


eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.


Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it which causes the system to reboot.


Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.


WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port.


InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.


Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC Reply-To Return-Path or From.


ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.


The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.


cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.


Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet which causes the CPU to crash.


HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.


The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.


IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.


Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy.


GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.


Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.


HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.


CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request.


The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter which allows local users to cause a denial of service by requesting a large number of sockets.


Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.


Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program aka the \Undelimited .HTR Request\ vulnerability.


WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets which causes the firewall to drop connections and stop forwarding packets.


Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.


The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables aka the \HostAnnouncement Flooding\ or \HostAnnouncement Frame\ vulnerability.


cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an \SMTP AUTH\ command with an unknown username.


The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program which does not authenticate the user.


MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs which allows remote attackers to cause a denial of service.


The undocumented semconfig system call in BSD freezes the state of semaphores which allows local users to cause a denial of service of the semaphore system by using the semconfig call.


The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.


The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address aka the \Malformed IPX Ping Packet\ vulnerability.


annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large malformed UDP packet to ports 22701 through 22705.


The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).


WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end which causes WebShield to continuously send itself copies of the e-mail.


Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.


Windows 95 Windows 98 Windows 2000 Windows NT 4.0 and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets aka jolt2 or the \IP Fragment Reassembly\ vulnerability.


Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file which consumes memory that is not released after the request is completed.


Microsoft TCP/IP Printing Services aka Print Services for Unix allows an attacker to cause a denial of service via a malformed TCP/IP print request.


FreeBSD NetBSD and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function setting a large buffer size via setsockopt then writing large buffers.


libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro.


Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.


The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets.


The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.


The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.


Super Mail Transfer Package (SMTP) later called MsgCore has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO MAIL FROM RCPT TO and DATA commands in the same session.


Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.


Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request aka the \Malformed Windows Media Encoder Request\ vulnerability.


Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.


Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.


The tmpwatch utility in Red Hat Linux forks a new process for each directory level which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/.


WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number.


mail.local in Sendmail 8.10.x does not properly identify the .\\n string which identifies the end of message text which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\\n.


WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file or writing to a file that does not exist via commands such as STORE UNIQUE (STOU) STORE (STOR) or APPEND (APPE).


Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100.


Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.


Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent which causes a thread to crash.


IMP does not remove files properly if the MSWordView application quits which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.


Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.


named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached aka the \zxfr bug.\


pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan e.g. by nmap.


Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.


GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands which allows remote attackers to cause a denial of service and local users to gain root privileges.


IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.


IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters aka the \Myriad Escaped Characters\ Vulnerability.


The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request which causes the winlogon process to fail aka the \Remote Registry Access Authentication\ vulnerability.


Qpopper 2.53 and 3.0 does not properly identify the \\n string which identifies the end of message text which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \\n.


rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.


The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000.


Concurrent Versions Software (CVS) uses predictable temporary file names for locking which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.


vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.


WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515).


Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.


Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.


CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request.


Trend Micro PC-Cillin does not restrict access to its internal proxy port allowing remote attackers to conduct a denial of service.


The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.


ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a \?\ character.


Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of \.\ characters.


POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.


Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.


Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified which allows remote attackers to cause a denial of service via a charset=\\ command aka the \Malformed MIME Header\ vulnerability.


McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.


PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.


Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port.


nss_ldap earlier than 121 when run with nscd (name service caching daemon) allows remote attackers to cause a denial of service via a flood of LDAP requests.


Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.


Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@127.0.0.1 (localhost) which causes Domino to enter a mail loop.


Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd.


WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests which disables proxy handling.


Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts which allows remote attackers to cause a denial of service by connecting to the server and not providing any input.


NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type which causes the client to crash.


Snort 1.6 when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about as demonstrated by an nmap protocol scan.


Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.


Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.


Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.


telnetd in FreeBSD 4.2 and earlier and possibly other operating systems allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable which consumes resources as the server processes the file.


qpopper POP server creates lock files with predictable names which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.


RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.


Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.


in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request which causes the server to access a NULL pointer and crash.


Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.


Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.


NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.


RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.


NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.


Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.


PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via \mode +owgscfxeb\ and \oper\ commands.


The getnameinfo function in FreeBSD 4.1.1 and earlier and possibly other operating systems allows a remote attacker to cause a denial of service via a long DNS hostname.


Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host aka the \NAPTHA\ class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.


The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests.


eWave ServletExec JSP/Java servlet engine versions 3.0C and earlier allows remote attackers to cause a denial of service via a URL that contains the \/servlet/\ string which invokes the ServletExec servlet and causes an exception if the servlet is already running.


vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode.


XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121.


RealNetworks RealPlayer 10.1.0.3114 and earlier and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.