On MX Series when the SIP ALG is enabled receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on MX Series: 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S6 ; 17.4 versions prior to 17.4R2-S8 17.4R3; 18.1 versions prior to 18.1R3-S3; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2.


A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820 CVE-2019-0980.


A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests aka 'Microsoft IIS Server Denial of Service Vulnerability'.


Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.


The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash repeated crashes can result in an extended Denial of Service (DoS) condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D77; 15.1 versions prior to 15.1F6-S10 15.1R6-S6 15.1R7; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D233 15.1X53-D59; 16.1 versions prior to 16.1R3-S8 16.1R4-S8 16.1R7; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S6 17.1R3; 17.2 versions prior to 17.2R2-S3 17.2R3; 17.3 versions prior to 17.3R2-S4 17.3R3; 17.4 versions prior to 17.4R2.


A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later due to an interaction in changes to handling of renegotiation attempts.


This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states to transition to Down resulting in a Denial of Service (DoS) attack. This attack requires a relatively large number of specific Internet Mixed (IMIXed) types of genuine and valid IPv6 packets to be transferred by the attacker in a relatively short period of time across three or more PFE's on the device at the same time. Continued receipt of the traffic sent by the attacker will continue to cause OSPF to remain in the Down starting state or flap between other states and then again to Down causing a persistent Denial of Service. This attack will affect all IPv4 and IPv6 traffic served by the OSPF routes once the OSPF states transition to Down. This issue affects: Juniper Networks Junos OS on MX480 MX960 MX2008 MX2010 MX2020: 18.1 versions prior to 18.1R2-S4 18.1R3-S5; 18.1X75 version 18.1X75-D10 and later versions; 18.2 versions prior to 18.2R1-S5 18.2R2-S3 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R1-S4 18.3R2 18.3R3; 18.4 versions prior to 18.4R1-S2 18.4R2.


Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By continuously sending a specially crafted IPv6 packet an attacker can repeatedly crash the system causing a prolonged Denial of Service (DoS). This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R6-S2 16.1R7; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3. This issue does not affect Juniper Networks Junos OS version 15.1 and prior versions.


Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon (bbe-smgd) and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result in an extended denial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.


When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically restarts without intervention but continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd leading to an extended Denial of Service (DoS) condition. This issue only affects systems configured with DHCPv6 enabled. DHCPv4 is unaffected by this issue. This issue affects Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S5 on MX Series; 16.1 versions prior to 16.1R7-S5 on MX Series; 16.2 versions prior to 16.2R2-S10 on MX Series; 17.1 versions prior to 17.1R3-S1 on MX Series; 17.2 versions prior to 17.2R3-S2 on MX Series; 17.3 versions prior to 17.3R3-S6 on MX Series; 17.4 versions prior to 17.4R2-S5 17.4R3 on MX Series; 18.1 versions prior to 18.1R3-S6 on MX Series; 18.2 versions prior to 18.2R2-S4 18.2R3 on MX Series; 18.2X75 versions prior to 18.2X75-D50 on MX Series; 18.3 versions prior to 18.3R1-S5 18.3R3 on MX Series; 18.4 versions prior to 18.4R2 on MX Series; 19.1 versions prior to 19.1R1-S2 19.1R2 on MX Series.


On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. By simulating a specific BGP session restart an attacker can repeatedly crash the RPD process causing prolonged denial of service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S7 17.1R3; 17.2 versions prior to 17.2R1-S7 17.2R3; 17.2X75 versions prior to 17.2X75-D92 17.2X75-D102 17.2X75-D110; 17.3 versions prior to 17.3R2-S2 17.3R3; 17.4 versions prior to 17.4R1-S4 17.4R2; 18.1 versions prior to 18.1R2. Junos OS releases prior to 16.1R1 are not affected.


This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.


A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A reboot of the device is required to restore service. Continued receipt of these valid broadcast packets will create a sustained Denial of Service (DoS) against the device. Affected releases are Juniper Networks Junos OS: 16.1 versions above and including 16.1R1 prior to 16.1R7-S5; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.


The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0 me0 em0 vme0) destined for another address. By continuously sending this type of packet an attacker can repeatedly crash the kernel causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7 17.2R3; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S4 17.4R2; 17.2X75 versions prior to 17.2X75-D110; 18.1 versions prior to 18.1R2.


A denial of service vulnerability exists when ASP.NET Core improperly handles web requests aka \ASP.NET Core Denial of Service Vulnerability.\ This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.


Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D160 on SRX340/SRX345; 17.3 on SRX340/SRX345; 17.4 versions prior to 17.4R2-S3 17.4R3 on SRX340/SRX345; 18.1 versions prior to 18.1R3-S1 on SRX340/SRX345; 18.2 versions prior to 18.2R2 on SRX340/SRX345; 18.3 versions prior to 18.3R1-S2 18.3R2 on SRX340/SRX345. This issue does not affect Junos OS releases prior to 15.1X49 on any platform.


Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies or trigger a Denial of Service (DoS) condition for the network.


A denial of service vulnerability exists when ASP.NET Core improperly handles web requests aka \ASP.NET Core Denial of Service Vulnerability.\ This affects ASP.NET Core 2.2 ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.


On QFX and PTX Series receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3 18.2R2; 17.2X75 versions prior to 17.2X75-D91 17.2X75-D100.


A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures. aka 'SymCrypt Denial of Service Vulnerability'.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0714 CVE-2019-0715 CVE-2019-0718 CVE-2019-0723.


A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system aka 'Windows Hyper-V Denial of Service Vulnerability'.


An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cause a Denial of Service (DoS) condition and core the routing protocol daemon (rpd) process when a specific malformed IPv4 packet is received by the device running BGP. This malformed packet can be crafted and sent to a victim device including when forwarded directly through a device receiving such a malformed packet but not if the malformed packet is first de-encapsulated from an encapsulated format by a receiving device. Continued receipt of the malformed packet will result in a sustained Denial of Service condition. This issue affects: Juniper Networks Junos OS 15.1 versions prior to 15.1F6-S12 15.1R7-S2; 15.1X49 versions prior to 15.1X49-D150 on SRX Series; 15.1X53 versions prior to 15.1X53-D68 15.1X53-D235 15.1X53-D495 15.1X53-D590; 16.1 versions prior to 16.1R3-S10 16.1R4-S12 16.1R6-S6 16.1R7-S2; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S9 17.1R3; 17.2 versions prior to 17.2R1-S7 17.2R2-S6 17.2R3; 17.3 versions prior to 17.3R2-S4 17.3R3.


Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests. Once started memory consumption will eventually impact any IPv4 or IPv6 request serviced by the jdhcpd daemon thus creating a Denial of Service (DoS) condition to clients requesting and not receiving IP addresses. Additionally some clients which were previously holding IPv6 addresses will not have their IPv6 Identity Association (IA) address and network tables agreed upon by the jdhcpd daemon after the failover event occurs which leads to more than one interface and multiple IP addresses being denied on the client. Affected releases are Juniper Networks Junos OS: 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.


A denial of service vulnerability exists when ASP.NET Core improperly handles web requests aka 'ASP.NET Core Denial of Service Vulnerability'.


Vulnerability

in

the

Oracle

iRecruitment

component

of

Oracle

E-Business

Suite

(subcomponent:

Password

Reset).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iRecruitment.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

iRecruitment.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

JCE).

The

supported

version

that

is

affected

is

Java

SE:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Java

SE.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).


Vulnerability

in

the

Oracle

VM

VirtualBox

product

of

Oracle

Virtualization

(component:

Core).

Supported

versions

that

are

affected

are

Prior

to

and

prior

to

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

VM

VirtualBox.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).


Vulnerability

in

the

Oracle

Outside

In

Technology

component

of

Oracle

Fusion

Middleware

(subcomponent:

Outside

In

Filters).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Outside

In

Technology

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Outside

In

Technology

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Outside

In

Technology.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

Supported

versions

that

are

affected

are

Prior

to

and

prior

to

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

VM

VirtualBox.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

product

of

Oracle

Java

SE

(component:

Scripting).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

Java

SE

Embedded

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).


Vulnerability

in

the

Oracle

Outside

In

Technology

component

of

Oracle

Fusion

Middleware

(subcomponent:

Outside

In

Filters).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Outside

In

Technology.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

File

Locking

Services).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

logon

to

the

infrastructure

where

Oracle

Solaris

executes

to

compromise

Oracle

Solaris.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Solaris.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Outside

In

Technology

component

of

Oracle

Fusion

Middleware

(subcomponent:

Outside

In

Filters).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Outside

In

Technology

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Outside

In

Technology

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Outside

In

Technology.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Core

RDBMS

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

having

Create

Session

Create

Procedure

privilege

with

logon

to

the

infrastructure

where

Core

RDBMS

executes

to

compromise

Core

RDBMS.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Core

RDBMS

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Core

RDBMS.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L).


A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which use $lookup and collations. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.1; v4.0 versions prior to 4.0.13; v3.6 versions prior to 3.6.15.


Vulnerability

in

the

Oracle

Outside

In

Technology

product

of

Oracle

Fusion

Middleware

(component:

Outside

In

Filters).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Outside

In

Technology

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Outside

In

Technology

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Outside

In

Technology.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

Supported

versions

that

are

affected

are

Prior

to

prior

to

and

prior

to

Easily

exploitable

vulnerability

allows

low

privileged

attacker

having

Local

Logon

privilege

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Data

Store.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:


A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.


Vulnerability

in

the

Core

RDBMS

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

having

Local

Logon

privilege

with

logon

to

the

infrastructure

where

Core

RDBMS

executes

to

compromise

Core

RDBMS.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Core

RDBMS

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Core

RDBMS.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:


In handleRun of TextLine.java there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140632678


Vulnerability

in

the

Oracle

Text

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

having

Create

Session

privilege

with

network

access

via

OracleNet

to

compromise

Oracle

Text.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Text

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Text.

CVSS

Base

Score

(Confidentiality

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L).


Vulnerability

in

the

Oracle

Service

Bus

component

of

Oracle

Fusion

Middleware

(subcomponent:

Web

Container).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Service

Bus.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Oracle

Service

Bus.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

VM

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

having

Create

Session

Create

Procedure

privilege

with

network

access

via

multiple

protocols

to

compromise

Java

VM.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Java

VM.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L).


Vulnerability

in

the

Siebel

Core

Server

BizLogic

Script

component

of

Oracle

Siebel

CRM

(subcomponent:

Integration

Scripting).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

network

access

via

HTTP

to

compromise

Siebel

Core

Server

BizLogic

Script.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Siebel

Core

Server

BizLogic

Script

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Siebel

Core

Server

BizLogic

Script

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Siebel

Core

Server

BizLogic

Script.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).


IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables in MSM8909W QCS605 Qualcomm 215 SD 210/SD 212/SD 205 SD 425 SD 427 SD 430 SD 435 SD 439 / SD 429 SD 450 SD 625 SD 650/52 SD 665 SD 675 SD 712 / SD 710 / SD 670 SD 730 SD 820 SD 845 / SD 850 SD 855 SD 8CX SDM439 Snapdragon_High_Med_2016 SXR1130


Vulnerability

in

the

Hyperion

BI+

component

of

Oracle

Hyperion

(subcomponent:

Foundation

UI

Servlets).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

network

access

via

HTTP

to

compromise

Hyperion

BI+.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hyperion

BI+

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Hyperion

BI+

accessible

data

and

unauthorized

ability

to

cause

a

partial

denial

of

service

(partial

DOS)

of

Hyperion

BI+.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L).


In the endCall() function of TelecomManager.java there is a possible Denial of Service due to a missing permission check. This could lead to local denial of access to Emergency Services with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-132438333.


Sanity

checks

are

missing

in

layout

which

can

lead

to

SUI

Corruption

or

can

lead

to

Denial

of

Service

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Connectivity

Snapdragon

Consumer

Electronics

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wired

Infrastructure

and

Networking

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable a running Unbound installation cannot be remotely or locally exploited.


A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint it is possible to cause the Go runtime to panic (resulting in a denial of service to the istio-pilot application).


Dell EMC Avamar Server versions 7.4.1 7.5.0 7.5.1 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 2.1 2.2 2.3 and 2.4. contain an XML External Entity(XXE) Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability to cause Denial of Service or information exposure by supplying specially crafted document type definitions (DTDs) in an XML request.


A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver such as vfio-pci and the local attacker is administratively granted ownership of the device it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10 4.14 and 4.18 are vulnerable.


Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of service.


Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port \cmdvrtLPCServerPort\. A low privileged local process can connect to this port and send an LPC_DATAGRAM which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.


A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user having read permissions on the LDAP server could use this flaw to cause denial of service.


An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.


McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517 potentially leading to a denial of service. This affects the scanning proxies.


ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.


Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a \stopped\ state. A remote unauthenticated attacker can use this vulnerability to stop an active slideshow.


A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user (\root\) can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.


C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result malicious clients could send short messages which would take a long time for the server to parse potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00.


A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).


An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.


C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result malicious clients could send short messages which would result in a large memory allocation potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.02.03.00.


It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.


A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service.


In 389-ds-base up to version 1.4.1.2 requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using SSL/TLS are not taking this timeout into account during reads and may hang longer.An unauthenticated attacker could repeatedly create hanging LDAP requests to hang all the workers resulting in a Denial of Service.


Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwritten arbitrarily potentially creating a denial of service condition.


Openwsman versions up to and including 2.6.9 are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.


McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511 potentially leading to a denial of service. This affects the scanning proxies.


Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result malicious clients could send short messages which would take a long time for the server to parse potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00.


Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result malicious clients could send short messages which would take a long time for the server to parse potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00.


An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.


The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.


Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object \<GUID>_CisSharedMemBuff\. This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object which allows a low privileged process to modify the object data causing CmdAgent.exe to crash.


Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result malicious clients could send short messages which would take a long time for the server to parse potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00.


Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets.


Spice versions 0.5.2 through 0.14.1 are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service or in the worst case code-execution by unauthenticated attackers.


Nessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to improper validation of specific imported scan types. An authenticated remote attacker could potentially exploit this vulnerability to cause a Nessus scanner to become temporarily unresponsive.


Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port \cmdServicePort\. A low privileged process can crash CmdVirth.exe to decrease the port's connection count followed by process hollowing a CmdVirth.exe instance with malicious code to obtain a handle to \cmdServicePort\. Once this occurs a specially crafted message can be sent to \cmdServicePort\ using \FilterSendMessage\ API. This can trigger an out-of-bounds write if lpOutBuffer parameter in FilterSendMessage API is near the end of specified buffer bounds. The crash occurs when the driver performs a memset operation which uses a size beyond the size of buffer specified causing kernel crash.


An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.


A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability to build a link to the device and send specific packets to cause a denial of service.


Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result malicious clients could send short messages which would take a long time for the server to parse potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00.


in

in

the

Linux

kernel

before

has

some

error-handling

cases

that

did

not

free

allocated

hostcmd

memory

aka

This

will

cause

a

memory

leak

and

denial

of

service.


Certain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2 R9000 before 1.0.5.2 XR500 before 2.3.2.56 and XR700 before 1.0.1.20.


An issue was discovered on Samsung mobile devices with N(7.x) O(8.x) and P(9.0) (Broadcom Wi-Fi chipsets) software. A denial-of-service attack can leverage a shared interface between Broadcom Bluetooth and Broadcom Wi-Fi. The Samsung ID is SVE-2019-15350 (November 2019).


A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash which leads to denial of service.


An issue was discovered in libgpac.a in GPAC before 0.8.0 as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in odf/desc_private.c that can cause a denial of service via a crafted MP4 file.


The OpenID client application in Atlassian Crowd before version 3.6.2 and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability.


An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service.


An issue was discovered in Mattermost Server before 5.16.0. It allows attackers to cause a denial of service (markdown renderer hang) via many backtick characters.


An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Broadcom Wi-Fi and SEC Wi-Fi chipsets) software. Wi-Fi allows a denial of service via TCP SYN packets. The Samsung ID is SVE-2018-13162 (March 2019).


The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4 from version 8.6.0 before 8.6.2 and from version 8.7.0 before 8.7.1.


qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent which allows attackers to cause a denial of service (API blockage).


A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engine's internals. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.7.


GNU patch through 2.7.6 contains a free(p_linep_end) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.


An issue was discovered in Mattermost Server before 5.14.0 5.13.3 5.12.6 and 5.9.4. It allows remote attackers to cause a denial of service (application hang) via a crafted SVG document.


NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.


Certain

NETGEAR

devices

are

affected

by

denial

of

service.

This

affects

before

before

before

before

and

before


Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0.


In the Linux kernel before 5.1 there is a memory leak in __feat_register_sp() in net/dccp/feat.c which may cause denial of service aka CID-1d3ff0950e2b.


An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages which cause the message decompressor to incorrectly allocate memory. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.1; v4.0 versions prior to 4.0.13; v3.6 versions prior to 3.6.15; v3.4 versions prior to 3.4.24.


An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3 aka CID-b43d1f9f7067.


An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service (memory consumption) via a large Slack import.


Certain NETGEAR devices are affected by denial of service. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4.


In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2 an input file can result in an infinite loop and hang with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.


An issue was discovered in libgpac.a in GPAC before 0.8.0 as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list.c that can cause a denial of service via a crafted MP4 file.


In xml.rs in GNOME librsvg before 2.46.2 a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.


A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.2.


An issue was discovered in Mattermost Server before 5.8.0 5.7.2 5.6.5 and 4.10.7. It allows attackers to cause a denial of service (memory consumption) via OpenGraph.


An issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of service (CPU consumption) via crafted characters in a SQL LIKE clause to an APIv4 endpoint.


An issue was discovered in libgpac.a in GPAC before 0.8.0 as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.


An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c related to a for loop.


An issue was discovered in Mattermost Server before 5.7 5.6.3 5.5.2 and 4.10.5. It allows attackers to cause a denial of service (memory consumption) via an outgoing webhook or a slash command integration.


An issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a denial of service (client-side application crash) via a LaTeX message.


Certain

NETGEAR

devices

are

affected

by

denial

of

service.

This

affects

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

before

and

before


Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to the port the Logstash beats input could send a specially crafted network packet that would cause Logstash to stop responding.


A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. Under certain conditions an unauthenticated attacker could force the Magento store's full page cache to serve a 404 page to customers.


In Binaryen 1.38.22 there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file as demonstrated by wasm-merge.


An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash) via a crafted wasm file.


An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter::Action in Core/Ap4Atom.cpp leading to a denial of service (program crash) as demonstrated by mp42hls.


In elfutils 0.175 a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault leading to denial of service (program crash).


Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries as these are built with that flag.


A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1 AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.


An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection no TCP ports are open.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

before

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.


ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c related to SVG and libxml2.


Due to a lack of file length check the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.


UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches an inconsistent state) via input data that triggers an error.


A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures aka CID-45c1380358b1.


The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.


An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters.


An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. When an exception occurs on an ARM system which is handled without changing processor level some interrupts are unconditionally enabled during exception entry. So exceptions which occur when interrupts are masked will effectively unmask the interrupts. A malicious guest might contrive to arrange for critical Xen code to run with interrupts erroneously enabled. This could lead to data corruption denial of service or possibly even privilege escalation. However a precise attack technique has not been identified.


Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures aka CID-68501df92d11.


Envoy 1.12.0 allows a remote denial of service because of resource loops as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used.\


The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)


An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18 2.0.0.11 2.1.0.1 and prior) to reboot which could cause a denial of service.


A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures aka CID-9bbfceea12a8.


The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information) which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions whereas 2b3dedfb9ba1 is a mitigation for 1.1.


The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.


Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True a related issue to CVE-2019-18836.


OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Debug RPC calls to crash a database server within the SVOTE_Debug RPC handler.


The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.


Honeywell equIP series IP cameras Multiple equIP Series Cameras A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.


A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures aka CID-1acb8f2a7a9f.


X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets which could cause a denial of service or arbitrary code execution.


Two

memory

leaks

in

the

function

in

in

the

Linux

kernel

through

allow

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execute code on the target machine. A failure in exploitation leads to a denial of service.


The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.


DISPUTED

A

memory

leak

in

the

function

in

in

the

Linux

kernel

before

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

aka

NOTE:

This

has

been

argued

as

not

a

valid

vulnerability.

The

upstream

commit

was

reverted.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

before

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot) as demonstrated by JSON misparsing of the \\\\} string to v1/system/login.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

through

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


Memory

leaks

in

functions

under

drivers/gpu/drm/amd/display/dc

in

the

Linux

kernel

before

allow

attackers

to

cause

a

denial

of

service

(memory

consumption).

This

affects

the

function

in

the

function

in

the

function

in

the

function

in

the

function

in

the

function

in

and

the

function

in

aka


An out-of-bounds memory write issue was found in the Linux Kernel version 3.13 through 5.4 in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system resulting in a denial of service.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

through

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

copy

to

udata

failures

aka


** DISPUTED ** A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time.


radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.


Memory

leaks

in

in

the

Linux

kernel

through

allow

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures.

This

affects

the

function

the

function

and

the

function

aka


ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service.


Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service caused by an error in the \homeplugd\ process. By sending a specially crafted UDP packet an attacker could exploit this vulnerability to cause the device to reboot.


relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.


Memory

leaks

in

functions

under

drivers/gpu/drm/amd/display/dc

in

the

Linux

kernel

through

allow

attackers

to

cause

a

denial

of

service

(memory

consumption).

This

affects

the

function

in

the

function

in

the

function

in

the

function

in

and

the

function

in

aka


** DISPUTED ** Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading.


lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column which allows attackers to cause a denial of service or possibly have unspecified other impact.


A

vulnerability

has

been

identified

in

SCALANCE

IRT

SCALANCE

IRT

SCALANCE

IRT

PRO

SCALANCE

SCALANCE

IRT

SCALANCE

IRT

PRO

SCALANCE

SCALANCE

SCALANCE

SCALANCE

TS

SCALANCE

SCALANCE

SCALANCE

PRO

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

SCALANCE

FE

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

EEC

SCALANCE

EEC

coated)

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

PoE

SCALANCE

PoE

SCALANCE

TS

SCALANCE

TS

SCALANCE

SCALANCE

SCALANCE

SCALANCE

SCALANCE

FE

SCALANCE

FE

SCALANCE

SCALANCE

IRT

SCALANCE

IRT

SCALANCE

SCALANCE

SCALANCE

IRT

SCALANCE

SCALANCE

SCALANCE

SCALANCE

ports

on

front)

SCALANCE

ports

on

front)

SCALANCE

ports

on

rear)

SCALANCE

ports

on

rear)

SCALANCE

ports

on

front)

SCALANCE

ports

on

front)

SCALANCE

ports

on

rear)

SCALANCE

ports

on

rear)

SCALANCE

TS

SCALANCE

TS

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

front)

SCALANCE

EEC

ports

on

rear)

SCALANCE

EEC

ports

on

rear)

SCALANCE

PoE

ports

on

front)

SCALANCE

PoE

ports

on

rear)

SCALANCE

PoE

ports

on

front)

SCALANCE

PoE

ports

on

rear)

SCALANCE

PoE

TS

ports

on

front)

SIMATIC

CP

RNA

SIMATIC

CP

SIMATIC

CP

Advanced

SIMATIC

CP

RNA

SIMATIC

SIMATIC

SIPLUS

NET

CP

SIPLUS

NET

CP

Advanced

SIPLUS

NET

SCALANCE

The

VxWorks-based

Profinet

TCP

Stack

can

be

forced

to

make

very

expensive

calls

for

every

incoming

packet

which

can

lead

to

a

denial

of

service.


Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures aka CID-29cd13cfd762.


SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.


A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsi_prepare_beacon() failures aka CID-d563131ef23c.


** DISPUTED ** A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because \rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct but when invoked from sdma_init() that is a pointer to a static const struct so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).\


An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service (guest OS crash) because VMX VMEntry checks mishandle a certain case. Please see XSA-260 for background on the MovSS shadow. Please see XSA-156 for background on the need for #DB interception. The VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted Single Stepping is active and blocked by STI/MovSS is active despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the guest. HVM/PVH guest userspace code may be able to crash the guest resulting in a guest Denial of Service. All versions of Xen are affected. Only systems supporting VMX hardware virtual extensions (Intel Cyrix or Zhaoxin CPUs) are affected. Arm and AMD systems are unaffected. Only HVM/PVH guests are affected. PV guests cannot leverage the vulnerability.


A

memory

leak

in

the

function

in

in

the

Linux

kernel

before

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


** DISPUTED ** A memory leak in the fsl_lpspi_probe() function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering pm_runtime_get_sync() failures aka CID-057b8945f78f. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control these failures at probe time.


** DISPUTED ** A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred.


The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict the advertisement connection request packet on reception allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.


A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.


In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0 command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access resulting in Denial of Service (application crash) or potential code execution.


Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may when sent quickly in large volumes lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc.


An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU Xen attempted to dynamically adapt the number of levels of pagetables (the pagetable height) in the IOMMU according to the guest's address space size. The code to select and update the height had several bugs. Notably the update was done without taking a lock which is necessary for safe operation. A malicious guest administrator can cause Xen to access data structures while they are being modified causing Xen to crash. Privilege escalation is thought to be very difficult but cannot be ruled out. Additionally there is a potential memory leak of 4kb per guest boot under memory pressure. Only Xen on AMD CPUs is vulnerable. Xen running on Intel CPUs is not vulnerable. ARM systems are not vulnerable. Only systems where guests are given direct access to physical devices are vulnerable. Systems which do not use PCI pass-through are not vulnerable. Only HVM guests can exploit the vulnerability. PV and PVH guests cannot. All versions of Xen with IOMMU support are vulnerable.


** DISPUTED ** A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot.


In libIEC61850 1.4.0 StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service.


A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures aka CID-b8d17e7d93d2.


In Octopus Deploy before 2019.10.6 an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)


knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently in extreme cases taking even several CPU seconds for each such uncached message. For example a few thousand A records can be squashed into one DNS message (limit is 64kB).


A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions) Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions) KTK ATE530S (All versions) SIDOOR ATD430W (All versions) SIDOOR ATE530S COATED (All versions) SIDOOR ATE531S (All versions) SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions < V2.0) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.0) SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2) SIMATIC ET200SP IM155-6 MF HF (All versions) SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions) SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2) SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2) SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2) SIMATIC MICRO-DRIVE PDC (All versions) SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) (All versions >= V4.2) SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0) SIMATIC S7-1500 Software Controller (All versions < V2.0) SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions) SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants) (All versions) SIMATIC S7-400 PN/DP V7 and below CPU family (incl. SIPLUS variants) (All versions) SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions) SIMATIC TDC CP51M1 (All versions) SIMATIC TDC CPU555 (All versions) SIMATIC WinAC RTX (F) 2010 (All versions) SINAMICS S/G Control Unit w. PROFINET (All versions). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.


** DISPUTED ** A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the system must have already been out of memory before the probe began.


Multiple

memory

leaks

in

the

function

in

in

the

Linux

kernel

through

allow

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

or

failures

aka


A

memory

leak

in

the

function

in

in

the

Linux

kernel

through

allows

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

triggering

failures

aka


A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10) Modicon M340 (all firmware versions) and Modicon BMxCRA and 140CRA modules (all firmware versions) which could cause a Denial of Service attack on the PLC when upgrading the controller with an empty firmware package using FTP protocol.


A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Modicon BMxCRA and 140CRA modules (all firmware versions) which could cause a Denial of Service attack on the FTP service when upgrading the firmware with a version incompatible with the application in the controller using FTP protocol.


A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10) which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.


On version 14.0.0-14.1.0.1 BIG-IP virtual servers with TLSv1.3 enabled may experience a denial of service due to undisclosed incoming messages.


An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1 causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).


A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90) Modicon M340 (firmware version prior to V3.10) Modicon Premium (all versions) and Modicon Quantum (all versions) which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01 Modicon M580 - firmware versions prior to V2.80 All firmware versions of Modicon Quantum and Modicon Premium.


A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80 which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller.


A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected.


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.


A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.


An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c when called from opj_tcd_init_tile in openjp2/tcd.c as demonstrated by the 64-bit opj_decompress.


A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90) Modicon M340 (firmware versions prior to V3.10) Modicon Premium (all versions) Modicon Quantum (all versions) which could cause a possible denial of service when reading invalid data from the controller.


A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Modicon BMxCRA and 140CRA modules (all firmware versions) which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the package using FTP protocol.


The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.


An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.


ENTTEC Datagate MK2 Storm 24 Pixelator all firmware versions prior to (70044 70050 70060)_update_05032019-482 allows an unauthenticated user to initiate a remote reboot which may be used to cause a denial of service condition.


In Modicon Quantum all firmware versions CWE-264: Permissions Privileges and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol.


In Bevywise MQTTRoute 1.1 build 1018-002 a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker.


A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311 BMENOC0321) (see notification for version info) which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module.


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus.


Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions) which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device.


A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Modicon BMxCRA and 140CRA modules (all firmware versions) which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.


A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service.


Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.


A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7) SIMATIC HMI Comfort Outdoor Panels 7\ & 15\ (incl. SIPLUS variants) (All versions < V15.1 Upd 4) SIMATIC HMI Comfort Panels 4\ - 22\ (incl. SIPLUS variants) (All versions < V15.1 Upd 4) SIMATIC HMI KTP Mobile Panels KTP400F KTP700 KTP700F KTP900 and KTP900F (All versions < V15.1 Upd 4) SIMATIC IPC DiagMonitor (All versions < V5.1.3) SIMATIC NET PC Software V13 (All versions) SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14) SIMATIC NET PC Software V15 (All versions) SIMATIC RF188C (All versions < V1.1.0) SIMATIC RF600R (All versions < V3.2.1) SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 < V2.6.1) SIMATIC S7-1500 Software Controller (All versions between V2.5 (including) and V2.7 (excluding)) SIMATIC WinCC OA (All versions < V3.15 P018) SIMATIC WinCC Runtime Advanced (All versions < V15.1 Upd 4) SINEC-NMS (All versions < V1.0 SP1) SINEMA Server (All versions < V14 SP2) SINUMERIK OPC UA Server (All versions < V2.1) TeleControl Server Basic (All versions). Specially crafted network packets sent to affected devices on port 4840/tcp could allow an unauthenticated remote attacker to cause a denial of service condition of the OPC communication or crash the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the OPC communication.


A vulnerability has been identified in RFID 181EIP SIMATIC CP 1604 SIMATIC CP 1616 SIMATIC CP 343-1 Advanced SIMATIC CP 443-1 SIMATIC CP 443-1 Advanced SIMATIC CP 443-1 OPC UA SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC HMI Comfort Outdoor Panels 7\ & 15\ (incl. SIPLUS variants) SIMATIC HMI Comfort Panels 4\ - 22\ (incl. SIPLUS variants) SIMATIC HMI KTP Mobile Panels KTP400F KTP700 KTP700F KTP900 and KTP900F SIMATIC IPC DiagMonitor SIMATIC RF182C SIMATIC RF185C SIMATIC RF186C SIMATIC RF188C SIMATIC RF600 family SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) SIMATIC S7-1500 Software Controller SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) SIMATIC S7-PLCSIM Advanced SIMATIC Teleservice Adapter IE Advanced SIMATIC Teleservice Adapter IE Basic SIMATIC Teleservice Adapter IE Standard SIMATIC WinAC RTX (F) 2010 SIMATIC WinCC Runtime Advanced SIMOCODE pro V EIP (incl. SIPLUS variants) SIMOCODE pro V PN (incl. SIPLUS variants) SINAMICS G130 V4.6 Control Unit SINAMICS G130 V4.7 Control Unit SINAMICS G130 V4.7 SP1 Control Unit SINAMICS G130 V4.8 Control Unit SINAMICS G130 V5.1 Control Unit SINAMICS G130 V5.1 SP1 Control Unit SINAMICS G150 V4.6 Control Unit SINAMICS G150 V4.7 Control Unit SINAMICS G150 V4.7 SP1 Control Unit SINAMICS G150 V4.8 Control Unit SINAMICS G150 V5.1 Control Unit SINAMICS G150 V5.1 SP1 Control Unit SINAMICS GH150 V4.7 (Control Unit) SINAMICS GH150 V4.8 (Control Unit) SINAMICS GL150 V4.7 (Control Unit) SINAMICS GL150 V4.8 (Control Unit) SINAMICS GM150 V4.7 (Control Unit) SINAMICS GM150 V4.8 (Control Unit) SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants) SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants) SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants) SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants) SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants) SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants) SINAMICS S150 V4.6 Control Unit SINAMICS S150 V4.7 Control Unit SINAMICS S150 V4.7 SP1 Control Unit SINAMICS S150 V4.8 Control Unit SINAMICS S150 V5.1 Control Unit SINAMICS S150 V5.1 SP1 Control Unit SINAMICS S210 V5.1 Control Unit SINAMICS S210 V5.1 SP1 Control Unit SINAMICS SL150 V4.7 (Control Unit) SINAMICS SL150 V4.8 (Control Unit) SINAMICS SM120 V4.7 (Control Unit) SINAMICS SM120 V4.8 (Control Unit) SINAMICS SM150 V4.8 (Control Unit) SIPLUS NET CP 343-1 Advanced SIPLUS NET CP 443-1 SIPLUS NET CP 443-1 Advanced SITOP Manager SITOP PSU8600 SITOP UPS1600 (incl. SIPLUS variants) TIM 1531 IRC (incl. SIPLUS NET variants). The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.


A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10) Modicon M340 (all firmware versions) and Modicon BMxCRA and 140CRA modules (all firmware versions) which could cause a Denial of Service attack on the PLC when upgrading the firmware with no firmware image inside the package using FTP protocol.


Lenovo was notified of a potential denial of service vulnerability affecting various versions of BIOS for Lenovo Desktop Desktop - All in One and ThinkStation that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.


A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control MLFBs: 6SR2...- 6SR3...- 6SR4...- (All Versions with option G28) SINAMICS PERFECT HARMONY GH180 with NXG II control MLFBs: 6SR2...- 6SR3...- 6SR4...- (All Versions with option G28). A denial of service vulnerability exists in the affected products. The vulnerability could be exploited by an attacker with network access to the device. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.


A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST when RTSP-over-HTTP tunneling is supported via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.


An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 11.6.x before 11.6.6 and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.


An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names and alter back-end server jobs (backup and synchronization jobs) which could allow for the possibility of a Denial of Service attack via a modified jobId parameter in a runJob.html GET request.


IBM MQ 9.1.0.0 9.1.0.1 9.1.1 and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 156398.


IBM MQ 8.0.0.0 through 8.0.0.10 9.0.0.0 through 9.0.0.5 and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiation function. IBM X-Force ID: 156564.


IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server possibly leading to an effective denial of service or disabling of the monitoring server. IBM X-Force ID: 167647.


IBM WebSphere Application Server 7.0 8.0 8.5 and 9.0 is vulnerable to a denial of service caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM X-Force ID: 172125.


IBM WebSphere MQ V7.1 7.5 IBM MQ V8 IBM MQ V9.0LTS IBM MQ V9.1 LTS and IBM MQ V9.1 CD are vulnerable to a denial of service attack caused by specially crafted messages. IBM X-Force ID: 160013.


IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected API. IBM X-Force ID: 162263.


IBM WebSphere Application Server Admin Console 7.5 8.0 8.5 and 9.0 is vulnerable to a potential denial of service caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380.


IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 10.1 10.5 and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091.


IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X-Force ID: 173625.


IBM MQ 9.1.0.0 9.1.0.1 9.1.0.2 9.1.0.3 9.1.1 9.1.2 and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966.


IBM MQ and IBM MQ Appliance 9.1 CD 9.1 LTS 9.0 LTS and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages. IBM X-Force ID: 166357.


IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639.


IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote attacker to cause a denial of service attack using repeated requests to the server. IBM X-Force ID: 158698.


IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel. IBM X-Force ID: 166629.


IBM MQ and IBM MQ Appliance 7.1 7.5 8.0 9.0 LTS 9.1 LTS and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processing error messages. IBM X-Force ID: 170967.


IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163.


IBM MQ 7.5.0.0 - 7.5.0.9 7.1.0.0 - 7.1.0.9 8.0.0.0 - 8.0.0.12 9.0.0.0 - 9.0.0.6 9.1.0.0 - 9.1.0.2 and 9.1.0 - 9.1.2 command server is vulnerable to a denial of service attack caused by an authenticated and authorized user using specially crafted PCF messages. IBM X-Force ID: 162084.


IBM

MQ

and

is

vulnerable

to

a

denial

of

service

attack

caused

by

a

memory

leak

in

the

clustering

code.

IBM

X-Force

ID:


An exploitable denial-of-service vulnerability exists in the hostapd 2.6 where an attacker could trigger AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial of service scenarios either by causing CAM table attacks or by leading to traffic flapping if faking already existing clients in other nearby Aps of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.


An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.


When Beckhoff TwinCAT is configured to use the Profinet driver a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior).


An exploitable denial-of-service vulnerability exists in the iocheckd service \I/O-Check\ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12) and WAGO PFC100 Firmware version 03.00.39(12). A single packet can cause a denial of service and weaken credentials resulting in the default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.


VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available.


bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4 4.x before 4.0.1 5.x before 5.0.2 and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS) when ENABLE_BGP_VNC is used for Virtual Network Control allows remote attackers to cause a denial of service (peering session flap) via attribute 255 in a BGP UPDATE packet. This occurred during Disco in January 2019 because FRR does not implement RFC 7606 and therefore the packets with 255 were considered invalid VNC data and the BGP session was closed.


An exploitable denial of service vulnerability exists in the iocheckd service \I/O-Check\ functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12) and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a denial of service resulting in the device entering an error state where it ceases all network communications. An attacker can send unauthenticated packets to trigger this vulnerability.


An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an infinite loop resulting in a denial of service. An attacker can send a packet to trigger this vulnerability.


VMware Workstation (15.x before 15.0.3 14.x before 14.1.6) and Fusion (11.x before 11.0.3 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but it is more likely to result in a denial of service of the guest.


azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vectors.


USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service attack on the affected products.


NVIDIA Jetson TX2 contains a vulnerability in the kernel driver (on all versions prior to R28.3) where the ARM System Memory Management Unit (SMMU) improperly checks for a fault condition causing transactions to be discarded which may lead to denial of service.


NVIDIA Shield TV Experience prior to v8.0 contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but does not properly restrict which applications can launch the Activity which may lead to code execution or denial of service.


An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor version 4620002. A set of TCP connections can cause unrestricted resource allocation resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability.


In FreeBSD 12.0-STABLE before r350828 12.0-RELEASE before 12.0-RELEASE-p10 11.3-STABLE before r350829 11.3-RELEASE before 11.3-RELEASE-p3 and 11.2-RELEASE before 11.2-RELEASE-p14 a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic leading to a remote denial of service.


NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DeviceIoControl where the software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer which may lead to denial of service.


NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid which may lead to denial of service.