In Netwide Assembler (NASM) 2.14rc0 there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack related to mishandling of line-syntax errors.


Windows Network File System Denial of Service Vulnerability


I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.


I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.


I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.


I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors.


Out of bound read in BIOS firmware for 8th 9th Generation Intel(R) Core(TM) Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.


Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.


Out of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable denial of service via local access.


Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215 BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.


Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.


Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.


Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error.


Denial of service in Savant web server via a null character in the requested URL.


Denial of service in BIND named via naptr.


Denial of service in BIND named via maxdname.


Denial of service in Qmail by specifying a large number of recipients with the RCPT command.


Denial of service in SMTP applications such as Sendmail when a remote attacker (e.g. spammer) uses many \RCPT TO\ commands in the same connection.


Denial of service in various Windows systems via malformed fragmented IGMP packets.


Denial of service in Linux 2.2.0 running the ldd command on a core file.


Denial of service in BIND by improperly closing TCP sessions via so_linger.


Denial of service in Gauntlet Firewall via a malformed ICMP packet.


Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.


Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.


Denial of service in Debian IRC Epic/epic4 client via a long string.


Denial of service in HP-UX SharedX recserv program.


Denial of service in MDaemon WorldClient and WebConfig services via a long URL.


Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.


Denial of service in Axent Raptor firewall via malformed zero-length IP options.


Denial of service in BIND named via consuming more than \fdmax\ file descriptors.


Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.


Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port aka NERP.


Denial of service in AIX ptrace system call allows local users to crash the system.


Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.


Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.


Denial of service in Linux syslogd via a large number of connections.


Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.


Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.


Denial of service in Qmail through long SMTP commands.


Denial of service in BIND named via malformed SIG records.


Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types codes and IP header lengths.


Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.


Denial of service in \poll\ in OpenBSD.


Denial of service in Gemalto's Sentinel LDK RTE version before 7.65


Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access.


Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access.


Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20.100.7755 may allow an authenticated user to potentially enable denial of service via local access.


Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via local access.


Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via local access.


Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.


Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.


Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the (1) name and (2) d_name entry attributes.


Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) via a JavaScript loop that attempts to construct an infinitely long string.


Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC TCC+ or XTC in which the request contains an invalid CORBA Interoperable Object Reference (IOR).


Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC TCC+ TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.


Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.


Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image.


Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18 allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter.


The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via unknown vectors.


The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.


The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code which allows remote attackers to cause a denial of service (incorrect object access) or possibly have unspecified other impact via a crafted document.


The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.


The PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.


The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.


Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service via network access.


In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web- SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.


In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service.


stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.


index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long message parameter.


Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.


Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146 15.45.32.5145 15.36.39.5144 and 15.40.46.5143 may allow an authenticated user to potentially denial of service via local access.


Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.


Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.


Dell PowerScale OneFS versions 8.2.x-9.3.0.x contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability leading to a denial of service.


Dell PowerScale OneFS 8.2 x 9.1.0.x 9.2.1.x and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability leading to denial of service/data unavailability.


coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.


coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.


queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.


IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178.


IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command. IBM X-Force ID: 182366.


Adobe Reader and Acrobat 7.x before 7.1.4 8.x before 8.1.7 and 9.x before 9.2 do not properly validate input which allows attackers to cause a denial of service via unspecified vectors.


Adobe Reader and Acrobat 9.x before 9.2 8.x before 8.1.7 and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion which allows remote attackers to cause a denial of service via a crafted document.


A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.


A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.


A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found.


A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.


A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version.


The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to connect to a target system using RDP and send specially crafted requests aka \Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability.\


Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.


Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access.


Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.


Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.


Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.


Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.


The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests aka Bug ID CSCut62022.


IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992.


Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.


Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.


Mikrotik

RouterOs

before

(stable

tree)

in

the

process.

An

authenticated

remote

attacker

can

cause

a

Denial

of

Service

due

to

a

divide

by

zero

error.


Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.


Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.


Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error.


Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.


Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.


PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field.


PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name Last Name Company Name or Fax field as demonstrated by crossPwn.


IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM X-Force ID: 156159.


IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (administration UI outage) via unspecified vectors.


In 2345 Security Guard 3.6 the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040.


In 2345 Security Guard 3.6 the driver file (2345DumpBlock.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222044.


In 2345 Security Guard 3.6 the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222098.


In 2345 Security Guard 3.6 the driver file (2345DumpBlock.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040.


In 2345 Security Guard 3.6 the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222054.


In 2345 Security Guard 3.6 the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x0022209c.


In 2345 Security Guard 3.6 the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222018.


In 2345 Security Guard 3.6 the driver file (2345BdPcSafe.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222108.


In 2345 Security Guard 3.7 the driver file (2345NsProtect.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x8000200D.


In 2345 Security Guard 3.7 the driver file (2345NsProtect.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x002220E4.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222088.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x0022204C.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222050.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222548.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222100.


In 2345 Security Guard 3.7 the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222014.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222104.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x002220e0.


In 2345 Security Guard 3.7 the driver file (2345BdPcSafe.sys X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222550.


IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplied URL rendering the application unusuable. IBM X-Force ID: 189375.


IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078.


LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter.


AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invalid AFP request that triggers an unchecked error condition.


The server in IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon crash and message data loss) via malformed headers during a WebSockets connection upgrade.


The server in IBM WebSphere MQ 7.0.0.1 7.0.0.2 and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecified other impact via malformed data.


The server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.


The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition.


The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.


Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable that triggers an out-of-bounds memory read.


Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.


Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets.


Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets.


Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets.


Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets.


Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.


Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.


The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCtq72699.


The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCuj94651.


The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCto70562.


The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCud29566.


The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCua86589.


The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCua64961.


The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) via a malformed SIP message aka Bug ID CSCtb93416 the \SIP Message Handling Denial of Service Vulnerability.\


The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages aka Bug ID CSCuv79202.


The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet aka Bug ID CSCsk32606.


The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via a malformed session attribute aka Bug ID CSCsk40030.


The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed header aka Bug ID CSCsk04588.


The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.8(1)S5 allows remote attackers to cause a denial of service (device crash) via a malformed header aka Bug ID CSCsz13590.


The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed Contact header aka Bug ID CSCsj98521.


The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9.7(3)P before 9.7(3)P11 allows remote attackers to cause a denial of service (device crash) via a long message aka Bug ID CSCsk44115.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730008 a different vulnerability than CVE-2017-16948.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82732140.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82736068.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730020 a different vulnerability than CVE-2017-17050.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730054.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730070.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730030.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730088.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730074.


TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\\\.\\Viragtlt DeviceIoControl request of 0x82730050.


Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lead to a denial of service vulnerability.


IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791.


IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.


A stack-based buffer under-read in htmldoc before 1.9.12 allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.


IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header.


IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.


IBM Sterling Connect:Direct 4.5.00 4.5.01 4.6.0 before 4.6.0.6 iFix008 and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service via unspecified vectors.


Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.


Format string vulnerability in the rrdtool module 1.4.7 for Python as used in Zenoss allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.


Format string vulnerability in logging function of ypbind 3.3 while running in debug mode leaks file descriptors and allows an attacker to cause a denial of service.


Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in a nickname.


Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation.


Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page.


Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function.


Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename which is not properly handled when calling certain Apple AppKit functions.


Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable.


Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status code portion of an HTTP response.


Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string specifiers in a LIST command.


Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2 with debug enabled allows local users to cause a denial of service (crash) or gain root privileges.


Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash lockup or restart) via a Multi-Part vCard with fields containing a large number of format string specifiers.


Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (crash) in sylpheed via format strings in an error message.


Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via \%s\ or \%n\ sequences in (1) the username during login or other FTP commands such as (2) dir.


Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.


Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a message.


Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that contains format strings.


Format string vulnerability in the Lithtech engine as used in multiple games allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.


Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message.


Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request aka Bug ID CSCug21497.


Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attackers to cause a denial of service (application crash) via format string specifiers.


Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the version string.


Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.


Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating and then listing folders whose names contain format string specifiers.


Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (crash) or \compromise the server\ via encoded format string specifiers in the query string.


Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226.


Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file containing extended ASCII which causes the Unicode converter to be invoked.


Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.


Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL.


Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field.


Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).


Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument.


Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a (1) nickname or (2) chat message.


Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.


Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.


In SUPERAntiSpyware Professional Trial 6.0.1254 the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148.


In SUPERAntiSpyware Professional Trial 6.0.1254 the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078.


In SUPERAntiSpyware Professional Trial 6.0.1254 the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080.


In SUPERAntiSpyware Professional Trial 6.0.1254 the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c.


HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information modify data or cause a denial of service via unspecified vectors.


Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28439.


Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28319.


Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-31183 CVE-2021-33772.


Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-31183 CVE-2021-34490.


Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-33772 CVE-2021-34490.


Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets aka Bug ID CSCuf89557.


Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug ID CSCue01743.


Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets aka Bug ID CSCtq78849.


Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets aka Bug ID CSCui06507.


Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets aka Bug IDs CSCum60442 and CSCum60447.


Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in an authentication packet aka Bug ID CSCuv40469.


Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request aka Bug ID CSCuv40528.


Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption and partial outage) via crafted SIP packets aka Bug ID CSCur12473.


Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet as demonstrated by a SIP INVITE message from a Tandberg device aka Bug ID CSCtq73319.


Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message aka Bug ID CSCtr20426.


Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP message aka Bug ID CSCuu43026.


In the Linux kernel before 5.1.6 there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service aka CID-dea37a972655.


In the Linux kernel before 5.1.13 there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.


In the Linux kernel before 5.0.3 a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port which may cause denial of service aka CID-6caabe7f197d.


In the Linux kernel before 5.0 a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev which may cause denial of service aka CID-07f12b26e21a.


In

the

Linux

kernel

through

in

allows

an

attacker

(who

can

connect

a

crafted

USB

device)

to

cause

a

denial

of

service


In the Linux kernel before 4.13.5 a local user could create keyrings for other users via keyctl commands setting unwanted defaults or causing a denial of service.


In the Linux kernel before 4.20.2 kernel/sched/fair.c mishandles leaf cfs_rq's which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.


In the Linux kernel before 4.16.4 a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.


In the Linux kernel through 4.14.13 drivers/block/loop.c mishandles lo_release serialization which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.


Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search which allows remote authenticated users to cause a denial of service (daemon hang) via a fulltext search.


IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search.


IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon hang) via a paged search that triggers improper mutex processing.


IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite.


IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via a malformed LDAP paged search request.


IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation.


IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search.


IBM Tivoli Key Lifecycle Manager 3.0 3.0.1 4.0 and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP requests. IBM X-Force ID: 212779.


IBM Tivoli Key Lifecycle Manager 2.6 2.7 and 3.0 does not properly limit the number or frequency of interaction which could be used to cause a denial of service compromise program logic or other consequences. IBM X-Force ID: 148420.


Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds memory access) via a crafted app.


Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file.


Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.


Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0 as used in X.Org server and cairo allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.


Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7.


Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2 when in verbose mode allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.


Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.


Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 when the --add-mac --add-cpe-id or --add-subnet option is specified allows remote attackers to cause a denial of service via a crafted DNS request.


Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (service restart) via a crafted SIP message aka Bug ID CSCub54349.


Cisco Unified Communications Manager (CUCM) does not properly limit the rate of authentication attempts which allows remote attackers to cause a denial of service (application slowdown) via a series of requests aka Bug ID CSCud39515.


Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly handle errors which allows remote attackers to cause a denial of service (service disruption) via malformed registration messages aka Bug ID CSCuf93466.


Cisco Unified Communications Manager (aka CUCM formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message aka Bug ID CSCsi46466.


Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header aka Bug ID CSCsi48115.


Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service (CPU consumption or device outage) via a SYN flood on the SSH port during the booting process aka Bug ID CSCuu81757.


Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service (host OS or BMC hang) by sending crafted packets over the Inter-IC (I2C) bus aka Bug ID CSCuq77241.


Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device aka Bug ID CSCts32463.


Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device aka Bug ID CSCts32452.


Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented traffic aka Bug ID CSCtd26794.


Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (buffer leak and device crash) via ARP requests that trigger an ARP storm aka Bug ID CSCte43508.


Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pinging a virtual interface aka Bug ID CSCte55370.


Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.


Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7 and possibly other operating systems may allow attackers to cause a denial of service by triggering a core dump.


Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7 and possibly other operating systems may allow attackers to cause a denial of service by triggering a null dereference.


Multiple unknown vulnerabilities in the (1) AIM (2) LDAP (3) FibreChannel (4) GSM_MAP (5) SRVLOC and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).


Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).


Multiple unknown vulnerabilities in the (1) KINK (2) L2TP (3) MGCP (4) EIGRP (5) DLSw (6) MEGACO (7) LMP and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).


Multiple unknown vulnerabilities in the (1) TZSP (2) MGCP (3) ISUP (4) SMB or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.


An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2 8.x before 8.1.7 and possibly 7.x through 7.1.4 does not properly validate input which allows attackers to cause a denial of service via unknown vectors.


Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (crash) via a crafted ICAP request.


Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10 as used in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors.


Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8 9 and 10 on the x86 platform before 20070821 allow local users to cause a denial of service (system panic) via unspecified ioctl functions aka Bug 6433123.


Multiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers to cause a denial of service via unknown vectors.


Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multiple application hang) via unspecified vectors.


Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted PUB file possibly involving wordart.


Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.


Multiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors.


Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service (process crash) via unspecified vectors.


Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions.


Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact including a denial of service via \improper use\ of the SaveToFile function.


Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of service via \improperly initialized\ (1) LoadSegmentWord (2) PartitionType (3) SectorCount and (4) BootFilePath variables.


Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control (RunService.dll) allow remote attackers to cause a denial of service via certain functions when \improperly used\ as demonstrated by the AcceptControls subroutine.


Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors possibly related to denial of service caused by a search that begins with a .* sequence.


Multiple unspecified vulnerabilities in PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 allow attackers to cause a denial of service (crash) related to the (1) speak and (2) buy functions.


Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18 as used in Google Chrome before 33.0.1750.149 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22 as used in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15 as used in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors.


Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service (exception and daemon crash) via unknown vectors related to \unsafe substr() calls.\


Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10 and OpenSolaris before snv_114 allow local users to cause a denial of service (panic) via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29 as used in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23 as used in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified vectors.


Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15 as used in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows OS X and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.3.61.21 as used in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14 as used in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21 as used in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23 as used in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors a different issue than CVE-2015-8478.


Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23 as used in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4 7.0 through SP6 and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors.


Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol (SIP) messages.


Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.


Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (large or infinite loops) viarafted packets to the (1) UMA and (2) BER dissectors.


Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8 Thunderbird before 1.5.0.8 and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) via unspecified vectors.


Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors resulting in memory leaks.


Multiple unspecified vulnerabilities in the \utf8 combining characters handling\ (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.


Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets.


Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26 as used in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17 as used in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33 as used in Google Chrome before 49.0.2623.108 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands.


Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors.


Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors.


Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14 and 1.2.x before 1.2.3 allow remote attackers to cause a denial of service (crash) via unspecified vectors in (1) XCF and (2) CINEON images.


Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via unknown network traffic with a large \bytes-in-memory/bytes-on-wire ratio.\


Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors.


Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors aka Bug ID (1) CSCsk42419 (2) CSCsk60020 and (3) CSCsh51293.


Google V8 as used in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \type confusion.\


Google V8 as used in Google Chrome before 13.0.782.107 does not properly perform const lookups which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted web site.


Google V8 as used in Google Chrome before 12.0.742.112 performs an incorrect bounds check which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Google V8 as used in Google Chrome before 14.0.835.163 does not properly perform object sealing which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \type confusion.\


Google V8 as used in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.


Google V8 as used in Google Chrome before 14.0.835.163 does not properly implement script object wrappers which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.


Google V8 as used in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers out-of-bounds write operations.


Google V8 as used in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service (invalid read operation) via unspecified vectors.


Google V8 as used in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger \type corruption.\


Google V8 as used in Google Chrome before 15.0.874.121 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write operation.


Google V8 as used in Google Chrome before 19.0.1084.52 does not properly perform garbage collection which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.


Google V8 as used in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation.


Google V8 as used in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger incorrect access to memory.


A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2 macOS Mojave 10.14.4 tvOS 12.2 watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service.


Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series version 1.1 allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.


Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP


Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM exposing out of bounds memory contents resulting in a potential denial of service.


IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server. IBM X-Force ID: 179476.


IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file related to a \Read Access Violation starting at FPX+0x000000000000153a.\


Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.


All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system.


All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system.


All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) where a user can cause a GPU interrupt storm leading to a denial of service.


All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service


All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock leading to a denial of service.


All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service.


Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) via a program with certain instructions that prevent init from properly reaping a child whose parent has died.


ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system.


rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.xps

file

related

to

an

\Error

Code

starting

at

wow64!Wow64NotifyDebugger+0x000000000000001d.\


STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file related to a \Possible Stack Corruption starting at Unknown Symbol @ 0x00000000049f0281.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.mobi

file

related

to

a

\Read

Access

Violation

starting

at

STDUMOBIFile!DllUnregisterServer+0x000000000002efc0.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

a

\Read

Access

Violation

starting

at

STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.djvu

file

related

to

a

\Read

Access

Violation

starting

at

STDUDjVuFile!DllUnregisterServer+0x000000000000d917.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.epub

file

related

to

an

\Error

Code

starting

at


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

a

\Read

Access

Violation

starting

at

STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

a

\Read

Access

Violation

starting

at

STDUJBIG2File!DllUnregisterServer+0x0000000000001869.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

a

\Read

Access

Violation

starting

at

STDUJBIG2File!DllGetClassObject+0x00000000000043e0.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.xps

file

related

to

a

\Read

Access

Violation

starting

at

STDUXPSFile!DllUnregisterServer+0x0000000000005bd5.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.djvu

file

related

to

a

\Possible

Stack

Corruption

starting

at

STDUDjVuFile!DllUnregisterServer+0x000000000000d908.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

a

\Read

Access

Violation

starting

at

STDUJBIG2File!DllUnregisterServer+0x0000000000006e10.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.djvu

file

related

to

a

\Possible

Stack

Corruption

starting

at

STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

a

\Read

Access

Violation

starting

at

STDUJBIG2File!DllGetClassObject+0x0000000000003047.\


NVIDIA Virtual GPU Manager all contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service.


NVIDIA Virtual GPU Manager all contains a vulnerability in which the provision of an incorrectly sized buffer by a guest VM leads to GPU out-of-bound access which may lead to a denial of service.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it can dereference a NULL pointer which may lead to denial of service. This affects vGPU version 8.x (prior to 8.5) version 10.x (prior to 10.4) and version 11.0.


The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet as sent by the Striker ISAKMP Protocol Test Suite.


Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.


Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS).


Cisco VPN 3000 Concentrator 2.2.x and 3.x before 3.5.3 allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.


Cisco VPN 3000 Concentrator 2.2.x 3.6(Rel) and 3.x before 3.5.5 allows remote attackers to cause a denial of service via a long user name.


Cisco VPN 3000 Concentrator 2.2.x 3.6(Rel) and 3.x before 3.5.5 allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.


Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.


Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass code execution and denial of service.


Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).


Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash).


A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information which could cause a Denial of Service. The program terminates with signal SIGKILL.


A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users supporting a denial of service condition.


A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling which could let a malicious user cause a Denial of Service.


Unspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.


Unspecified vulnerability in Adobe ColdFusion 9.0 through 9.0.2 when the JRun application server is used allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to cause a denial of service via unknown vectors a different vulnerability than CVE-2010-3656.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allows attackers to cause a denial of service via unknown vectors a different vulnerability than CVE-2010-3657.


Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6 and 3.5.x before 3.5.4 allows attackers to cause a denial of service (memory consumption) via unknown vectors.


Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors.


Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed compressed .swf file a different issue than CVE-2006-3587.


Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in Adobe ColdFusion 10 before Update 5 when Internet Information Services (IIS) is used allows attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in Adobe ColdFusion 8.0 8.0.1 9.0 and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in an infinite loop.


Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request related to \input validation.\


Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.


Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 7.0 Gold through SP7 and 8.1 Gold through SP4 allows remote attackers to cause a denial of service (server thread hang) via unspecified vectors.


Unspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File).


Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.2(3) allows remote attackers to cause a denial of service (device reload) via crafted \data in the control-plane path with Layer 7 Application Inspections.\


Unspecified vulnerability in Cisco IOS 12.4 when NAT SCCP fragmentation support is enabled allows remote attackers to cause a denial of service (device reload) via crafted Skinny Client Control Protocol (SCCP) packets aka Bug ID CSCsy09250.


Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285 when running on Linux allows remote attackers to cause a denial of service (kernel panic) via \a series of TCP packets.\


Unspecified vulnerability in Cisco IOS 12.2XNA 12.2XNB 12.2XNC 12.2XND 12.4MD 12.4T 12.4XZ and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet aka Bug IDs CSCsu24505 and CSCsv75948.


Unspecified vulnerability in Cisco IOS 12.2 and 12.4 when SSLVPN sessions SSH sessions or IKE encrypted nonces are enabled allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet aka Bug ID CSCsq24002.


Unspecified vulnerability in Cisco IOS 12.2 through 12.4 when certificate-based authentication is enabled for IKE allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests aka Bug IDs CSCsy07555 and CSCee72997.


Unspecified vulnerability in Cisco IOS 12.2 through 12.4 when the Cisco Unified Border Element feature is enabled allows remote attackers to cause a denial of service (device reload) via crafted SIP messages aka Bug ID CSCsx25880.


Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet aka Bug ID CSCsz38104.


Unspecified vulnerability in Cisco IOS 12.0 through 12.4 when SIP voice services are enabled allows remote attackers to cause a denial of service (device crash) via a valid SIP message.


Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors aka Bug ID CSCub61009.


Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted Protocol Independent Multicast (PIM) packet.


Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 and 7.2(4)10 allows remote attackers to cause a denial of service (device reload) via a crafted IPv6 packet.


Unspecified vulnerability in Cisco IOS 12.2 and 12.4 when the L2TP mgmt daemon process is enabled allows remote attackers to cause a denial of service (device reload) via a crafted L2TP packet.


Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet aka Bug ID CSCtr26695.


Unspecified vulnerability in Cisco IOS 12.2SB before 12.2(33)SB10 and 15.0S before 15.0(1)S3a on Cisco 10000 series routers allows remote attackers to cause a denial of service (device reload) via a sequence of crafted ICMP packets aka Bug ID CSCtk62453.


Unspecified vulnerability in Cisco IOS 12.4 15.0 and 15.1 and IOS XE 2.5.x through 3.2.x allows remote attackers to cause a denial of service (device reload) via a crafted SIP message aka Bug ID CSCth03022.


Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk (VHD).


Unspecified vulnerability in EMC Disk Library (EDL) before 3.2.7 3.3.x before 3.3.2 epatch 8 and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service (communication-module crash) by sending a crafted message through TCP.


Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP.


Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the \drag + drop\ functionality.


Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image.


Unspecified vulnerability in Google Chrome before 5.0.375.55 allows attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the Safe Browsing functionality.


Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.


Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a \bad volume setting.\


Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer (HV) 06-00 through 06-71-/B allows remote attackers to cause a denial of service (application stop and web interface outage) via certain \unexpected data.\


Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service (connection prevention) by sending \data unexpectedly through a port.\


Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213 and on HP-UX before 20070314 allows remote attackers to cause a denial of service via certain data to a port.


Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder control processing halt) by sending \data unexpectedly through the port\.


Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service (application stop) via unexpected data.


Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remote attackers to cause a denial of service via unknown attack vectors when a web site is \improperly accessed.\


Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier and Groupmax Mail Server 7 and earlier allows remote attackers to cause a denial of service (product \stop\) via unspecified vectors involving \unexpected requests\.


Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service (application stop or fail) via unexpected requests or data.


Unspecified vulnerability in Hitachi XFIT/S XFIT/S/JCA XFIT/S/ZGN and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service (server process and transfer control process stop) when the products \receive data unexpectedly\.


Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack vectors.


Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages leading to route flapping possibly a related issue to CVE-2007-6372.


Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows local users to obtain sensitive information modify data or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknown vectors aka ZDI-CAN-1669.


Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors a different vulnerability than CVE-2013-2357 CVE-2013-2358 and CVE-2013-2360.


Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors a different vulnerability than CVE-2013-2357 CVE-2013-2358 and CVE-2013-2359.


Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 9.1x and 9.2x allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors a different vulnerability than CVE-2013-2357 CVE-2013-2359 and CVE-2013-2360.


Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors a different vulnerability than CVE-2013-2358 CVE-2013-2359 and CVE-2013-2360.


Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to cause a denial of service via unknown vectors aka ZDI-CAN-1676.


Unspecified vulnerability in HP StoreOnce D2D Backup System 1.x before 1.2.19 and 2.x before 2.3.0 allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP-UX B.11.31 when running ARPA Transport allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP ProCurve 9300m Series switches with software 08.0.01c through 08.0.01j allows remote attackers to cause a denial of service via unknown vectors a different switch series than CVE-2006-4015.


Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of service (crash) via \Program actions relating to exceptions.\


Unspecified vulnerability in HP-UX B.11.23 when running IPFilter in combination with PHNE_34474 allows remote attackers to cause a denial of service (system crash) via unspecified vectors.


Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option when Apache Commons FileUpload is used allows remote authenticated users to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors.


Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP Data Protector Express and Data Protector Express Single Server Edition (SSE) 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP-UX B.11.31 with AudFilter rules enabled allows local users to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows local users to read or modify data or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP Storage Essentials before 6.3.0 when LDAP authentication is enabled allows remote attackers to obtain sensitive information modify data or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP OpenVMS 8.3 8.3-1H1 and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors.


Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00 H06.08.00 through H06.18.01 and J06.04.00 through J06.07.01 allows local users to gain privileges cause a denial of service or obtain \access to data\ via unknown vectors.


Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call.


Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service via unknown vectors.


Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service or obtain \access\ via unknown vectors.


Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.


Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 3 before 1.85 and 4 before 2.22 allows remote authenticated users to cause a denial of service via unknown vectors.