In several places in ihevcd_decode.c a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-63522067.


In ImageMagick 7.0.6-5 a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.


In the FrameSequence_gif::FrameSequence_gif function of libframesequence there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-71361451.


There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.


The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \ImageIO\ component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image.


GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c \Read hex image data\ version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it.


In M3UParser::parse of M3UParser.cpp there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-68399439.


Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via vectors related to incorrect literal handling which trigger CPM stack corruption.


In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3 there is a missing NULL check in the ReadMATImage function in coders/mat.c leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.


GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c \Read hex image data\ version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it.


In ihevcd_ctb_boundary_strength_pbslice of libhevc there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-62851602.


There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0 related to libtic. A crafted input will lead to a remote denial of service attack.


In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-65718319.


In the ihevcd_parse_slice.c function slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-64784973.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party \file\ product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party \PCRE\ product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33387820.


The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server aka \Windows SMB Denial of Service Vulnerability\. This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.


A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as Low due to the possibility of a temporary denial of service. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32095713.


The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server aka \Windows SMB Denial of Service Vulnerability\. This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280.


A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-32577290.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10 Windows Server 2008 R2 Windows 8.1 Windows Server 2012 R2 or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0178 CVE-2017-0179 CVE-2017-0183 CVE-2017-0184 CVE-2017-0185 and CVE-2017-0186.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10 Windows 8.1 Windows Server 2012 Windows Server 2012 R2 or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0178 CVE-2017-0179 CVE-2017-0182 CVE-2017-0183 CVE-2017-0184 and CVE-2017-0185.


Hyper-V in Microsoft Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows guest OS users running as virtual machines to cause a denial of service via a crafted application aka \Hyper-V Denial of Service Vulnerability.\ This vulnerability is different from those described in CVE-2017-0074 CVE-2017-0076 CVE-2017-0097 and CVE-2017-0099.


A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34360591.


Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10 1511 and 1607; and Windows Server 2016 allows guest OS users running as virtual machines to cause a denial of service via a crafted application aka \Hyper-V Denial of Service Vulnerability.\ This vulnerability is different from those described in CVE-2017-0098 CVE-2017-0076 CVE-2017-0097 and CVE-2017-0099.


A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-30436808.


A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-34097915.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10 Windows Server 2008 R2 Windows 8.1 Windows Server 2012 R2 or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0178 CVE-2017-0179 CVE-2017-0182 CVE-2017-0184 CVE-2017-0185 and CVE-2017-0186.


A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1. Android ID: A-35472997.


Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows guest OS users running as virtual machines to cause a denial of service via a crafted application aka \Hyper-V Denial of Service Vulnerability.\ This vulnerability is different from those described in CVE-2017-0098 CVE-2017-0074 CVE-2017-0076 and CVE-2017-0097.


A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33129467.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-34097213.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33298089.


A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35763994.


Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document aka \Microsoft Hyper-V Network Switch Denial of Service Vulnerability.\ This vulnerability is different from those described in CVE-2017-0074 CVE-2017-0076 CVE-2017-0097 CVE-2017-0098 and CVE-2017-0099.


A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32322088.


Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.


A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-30352311.


The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.


Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10 1511 and 1607; and Windows Server 2016 allows guest OS users running as virtual machines to cause a denial of service via a crafted application aka \Hyper-V Denial of Service Vulnerability.\ This vulnerability is different from those described in CVE-2017-0098 CVE-2017-0074 CVE-2017-0097 and CVE-2017-0099.


A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1. Android ID: A-32322258.


A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1. Android ID: A-31554152.


A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33933140.


A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1. Android ID: A-31850211.


A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 7.0 7.1.1. Android ID: A-33251605.


A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10 Windows 8.1 Windows Server 2012 Windows Server 2012 R2 or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0178 CVE-2017-0179 CVE-2017-0182 CVE-2017-0183 CVE-2017-0184 and CVE-2017-0186.


Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets aka \Windows NetBIOS Denial of Service Vulnerability\.


A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34819017.


A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range.


A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10 Windows 10 1511 Windows 10 1607 Windows 8.1 Windows Server 2012 R2 and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0179 CVE-2017-0182 CVE-2017-0183 CVE-2017-0184 CVE-2017-0185 and CVE-2017-0186.


A denial of service vulnerability exists in the way that Windows 7 Windows 8.1 Windows 10 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding aka \Windows Denial of Service Vulnerability.\


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33621215.


Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10 1511 and 1607; and Windows Server 2016 allows guest OS users running as virtual machines to cause a denial of service via a crafted application aka \Hyper-V Denial of Service Vulnerability.\ This vulnerability is different from those described in CVE-2017-0098 CVE-2017-0074 CVE-2017-0076 and CVE-2017-0099.


The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request aka \Local Security Authority Subsystem Service Denial of Service Vulnerability.\


Denial of Service attack in airMAX < 8.3.2 airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33090864.


Microsoft Office 2010 SP2 Word 2010 SP2 Word 2013 RT SP1 and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document aka \Microsoft Office Denial of Service Vulnerability.\


A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-35467107.


A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34672748.


A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10 Windows 8.1 Windows Server 2012 R2 or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0178 CVE-2017-0182 CVE-2017-0183 CVE-2017-0184 CVE-2017-0185 and CVE-2017-0186.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33751193.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33137046.


A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35269635.


The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server aka \Windows SMB Denial of Service Vulnerability\. This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280.


The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.


A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-31647370.


A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 7.0 7.1.1. Android ID: A-33300701.


A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-34097231.


A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33818508.


Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 Gold and R2 and Windows Server 2016 are configured to answer version queries aka \Windows DNS Server Denial of Service Vulnerability\.


A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged user on a guest operating system aka \Hyper-V Denial of Service Vulnerability.\ This CVE ID is unique from CVE-2017-0178 CVE-2017-0179 CVE-2017-0182 CVE-2017-0183 CVE-2017-0185 and CVE-2017-0186.


A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-31752213.


In MPEG4Extractor.cpp there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID: A-64452857.


A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-35645051.


RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.


The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.


The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.


A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8 which allows attackers to cause a denial of service via a crafted file.


An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android through 0.0.80w for Web and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore an attacker only needs to know the device ID. This causes a denial of service. This might be interpreted as a vulnerability in customer-controlled software in the sense that the StashCat client side has no secure way to signal that it is ending a session and that data should be deleted.


The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option.


Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.


The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file.


The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream.


The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file.


The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.


The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.


The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.


coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.


In LibTIFF 4.0.8 there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory it will hang the system or trigger the OOM killer.


The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.


The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecified other impact via a crafted Ruby script related to the parser_tokadd_utf8 function in parse.y. NOTE: this might have security relevance as a bypass of a $SAFE protection mechanism.


The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.


A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0 which allows attackers to cause a denial of service via a crafted file related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after four consecutive calls to QPDFObjectHandle::parseInternal aka an \infinite loop.\


The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.


On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows leading to denial of service or other effects aka B-V2017061205.


The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.


coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.


The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.


Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file related to a \Read Access Violation starting at reporter!madTraceProcess.\


The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.


The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted avi file.


A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0 which allows attackers to cause a denial of service via a crafted file related to the PointerHolder function in PointerHolder.hh aka an \infinite loop.\


The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.


Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.


The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file.


The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections.


The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.


There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.


An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8 which allows attackers to cause a denial of service via a crafted file.


.NET Core 1.0 1.1 and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests aka \.NET CORE Denial Of Service Vulnerability\.


Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations thus disabling the service. Formerly ZDI-CAN-4350.


The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline which allows remote attackers to cause a denial of service (resource consumption) via crafted JPEG files.


There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.


The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option.


The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows a denial of service vulnerability when an attacker sends specially crafted requests to the server aka \Windows SMB Denial of Service Vulnerability\.


A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0 which allows attackers to cause a denial of service via a crafted file related to the QPDF::resolveObjectsInStream function in QPDF.cc aka an \infinite loop.\


The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file.


The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file.


.NET Core 1.0 1.1 and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data aka \.NET CORE Denial Of Service Vulnerability\.


The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.


The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.


net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3 when CONFIG_XFRM_MIGRATE is enabled does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.


The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an AcquireSemaphoreInfo call.


The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file because the end-of-file condition is not considered.


The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks causing denial of service.


There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26 related to an exit call. A Crafted input will lead to a remote denial of service attack.


The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file.


The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.


The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.


The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.


The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.


The function \Token& Scanner::peek\ in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.


The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an OpenPixelCache call.


The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length color_image data structure.


The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file during conversion to a wav file.


Windows Search in Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows server version 1709 allows an unauthenticated attacker to remotely send specially crafted messages that could cause a denial of service against the system due to improperly handing objects in memory aka \Windows Search Denial of Service Vulnerability\.


The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.


A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0 which allows attackers to cause a denial of service via a crafted file related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal aka an \infinite loop.\


An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.


arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor fxsave sgdt and sidt.


An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the \Contacts\ component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card.


A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service.


An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.


A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious network-based authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain specific URLs on the server.


On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55 12.1X47 prior to 12.1X47-D45 12.3R13 prior to 12.3R13 12.3X48 prior to 12.3X48-D35 13.3 prior to 13.3R10 14.1 prior to 14.1R8 14.1X53 prior to 14.1X53-D40 14.1X55 prior to 14.1X55-D35 14.2 prior to 14.2R6 15.1 prior to 15.1F2 or 15.1R1 15.1X49 prior to 15.1X49-D20 where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options a network based attacker can cause the Junos OS rpd daemon to crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \Safari\ component. It allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site.


An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.


A vulnerability was found in ipa before 4.4. IdM's ca-del ca-disable and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated unauthorized attacker could use this flaw to delete disable or enable CAs causing various denial of service problems with certificate issuance OCSP signing and deletion of secret keys.


An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.


On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50 12.1X47 prior to 12.1X47-D40 12.3 prior to 12.3R13 12.3X48 prior to 12.3X48-D30 13.2X51 prior to 13.2X51-D40 13.3 prior to 13.3R10 14.1 prior to 14.1R8 14.1X53 prior to 14.1X53-D35 14.1X55 prior to 14.1X55-D35 14.2 prior to 14.2R5 15.1 prior to 15.1F6 or 15.1R3 15.1X49 prior to 15.1X49-D30 or 15.1X49-D40 15.1X53 prior to 15.1X53-D35 and where RIP is enabled certain RIP advertisements received by the router may cause the RPD daemon to crash resulting in a denial of service condition.


The Juniper Enhanced jdhcpd daemon may experience high CPU utilization or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12 14.1X53-D38 14.1X53-D40 on QFX EX QFabric System; 15.1 prior to 15.1F2-S18 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51 15.1X53-D60 on NFX QFX EX.


An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability.


A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.


A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system services.


Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS versions are: 15.1 prior to 15.1F2-S15 15.1F5-S7 15.1F6-S5 15.1F7 15.1R4-S7 15.1R5-S2 15.1R6; 15.1X49 prior to 15.1X49-D78 15.1X49-D80; 15.1X53 prior to 15.1X53-D230 15.1X53-D63 15.1X53-D70; 16.1 prior to 16.1R3-S3 16.1R4; 16.2 prior to 16.2R1-S3 16.2R2; Releases prior to Junos OS 15.1 are unaffected by this vulnerability. 17.1R1 17.2R1 and all subsequent releases have a resolution for this vulnerability.


Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels and S7-300/S7-400 devices.


389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request resulting in denial of service.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \Security\ component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (resource consumption) via a crafted app.


A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated local user to create a fork bomb scenario also known as a rabbit virus or wabbit which will create processes that replicate themselves until all resources are consumed on the system leading to a denial of service to the entire system until it is restarted. Continued attacks by an unauthenticated local user can lead to persistent denials of services.


Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input


On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3 12.1X46 prior to 12.1X46-D60 12.3 prior to 12.3R12-S2 or 12.3R13 12.3X48 prior to 12.3X48-D40 13.2X51 prior to 13.2X51-D40 13.3 prior to 13.3R10 14.1 prior to 14.1R8 14.1X53 prior to 14.1X53-D12 or 14.1X53-D35 14.1X55 prior to 14.1X55-D35 14.2 prior to 14.2R7 15.1 prior to 15.1F6 or 15.1R3 15.1X49 prior to 15.1X49-D60 15.1X53 prior to 15.1X53-D30 and DHCPv6 enabled when a crafted DHCPv6 packet is received from a subscriber jdhcpd daemon crashes and restarts. Repeated crashes of the jdhcpd process may constitute an extended denial of service condition for subscribers attempting to obtain IPv6 addresses.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \Safari\ component. It allows remote attackers to cause a denial of service (application crash) via a crafted web site that improperly interacts with the history menu.


On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery (ND) packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious network-based packet flood of these crafted IPv6 NDP packets may eventually lead to resource exhaustion and a denial of service. The affected Junos OS versions are: 12.3 prior to 12.3R12-S4 12.3R13; 13.3 prior to 13.3R10; 14.1 prior to 14.1R8-S3 14.1R9; 14.1X53 prior ro 14.1X53-D12 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R6-S4 14.2R7-S6 14.2R8; 15.1 prior to 15.1R5; 16.1 before 16.1R3; 16.2 before 16.2R1-S3 16.2R2. 17.1R1 and all subsequent releases have a resolution for this vulnerability.


An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with ALGs enabled. This issue was caused by the code change for PR 1182910 in Junos OS 14.1X55-D30 14.1X55-D35 14.2R7 15.1R5 and 16.1R2. No other versions of Junos OS and no other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS on MX platforms running: 14.1X55 from 14.1X55-D30 to releases prior to 14.1X55-D35; 14.2R from 14.2R7 to releases prior to 14.2R7-S4 14.2R8; 15.1R from 15.1R5 to releases prior to 15.1R5-S2 15.1R6; 16.1R from 16.1R2 to releases prior to 16.1R3-S2 16.1R4.


On Juniper Networks Junos Space versions prior to 16.1R1 an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition.


An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.


The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a \MOV SS NULL selector\ instruction which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.


An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.


Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. By continuously sending specially crafted BGP OPEN messages an attacker can repeatedly crash the rpd process causing prolonged denial of service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R12-S4 12.3R13 12.3R3-S4; 12.3X48 prior to 12.3X48-D50; 13.3 prior to 13.3R4-S11 13.3R10; 14.1 prior to 14.1R8-S3 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R4-S7 14.2R6-S4 14.2R7; 15.1 prior to 15.1F2-S11 15.1F4-S1-J1 15.1F5-S3 15.1F6 15.1R4; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D33 15.1X53-D50.


A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured. Repeated crashes of the rpd daemon can result in an extended denial of service condition for the device. The affected releases are Junos OS 12.3X48 prior to 12.3X48-D50 12.3X48-D55; 13.3 prior to 13.3R10; 14.1 prior to 14.1R4-S13 14.1R8-S3 14.1R9; 14.1X53 prior to 14.1X53-D42 14.1X53-D50; 14.2 prior to 14.2R4-S8 14.2R7-S6 14.2R8; 15.1 prior to 15.1F2-S14 15.1F5-S7 15.1F6-S4 15.1F7 15.1R4-S7 15.1R5-S1 15.1R6; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D105 15.1X53-D47 15.1X53-D62 15.1X53-D70; 16.1 prior to 16.1R3-S3 16.1R4. No other Juniper Networks products or platforms are affected by this issue.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \CoreGraphics\ component. It allows remote attackers to cause a denial of service (infinite recursion) via a crafted image.


Fuji

to

to

to

to

to

allows

remote

attackers

to

cause

a

denial

of

service

via

specially

crafted

UDP

packets.


Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.


Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart) or excessive CPU usage causing all authentications to hang.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \CoreText\ component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message.


A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service.


The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.


The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references.


In Lenovo Active Protection System before 1.82.0.14 an attacker with local privileges could send commands to the system's embedded controller which could cause a denial of service attack on the system or the ability to alter hardware functionality.


A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230).


The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders version 5.1.1.0 allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server denial of service or server side request forgery.


Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1 for two instances of the same LSA recency is determined by first comparing sequence numbers then checksums and finally MaxAge. In a case where the sequence numbers are the same the LSA with the larger checksum is considered more recent and will not be flushed from the Link State Database (LSDB). Since the RFC does not explicitly state that the values of links carried by a LSA must be the same when prematurely aging a self-originating LSA with MaxSequenceNumber it is possible in vulnerable OSPF implementations for an attacker to craft a LSA with MaxSequenceNumber and invalid links that will result in a larger checksum and thus a 'newer' LSA that will not be flushed from the LSDB. Propagation of the crafted LSA can result in the erasure or alteration of the routing tables of routers within the routing domain creating a denial of service condition or the re-routing of traffic on the network. CVE-2017-3224 has been reserved for Quagga and downstream implementations (SUSE openSUSE and Red Hat packages).


ACTi

cameras

including

the

D

B

I

and

E

series

using

firmware

version

fail

to

properly

restrict

access

to

the

factory

reset

page.

An

unauthenticated

remote

attacker

can

exploit

this

vulnerability

by

directly

accessing

the

page.

This

will

allow

an

attacker

to

perform

a

factory

reset

on

the

device

leading

to

a

denial

of

service

condition

or

the

ability

to

make

use

of

default

credentials


A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated remote attacker to cause a Telnet process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCux46778. Known Affected Releases: 7.0(3)I3(0.170). Known Fixed Releases: 7.0(3)I3(1) 7.0(3)I3(0.257) 7.0(3)I3(0.255) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1).


An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease.


The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel version 2.2.0 allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server denial of service or server side request forgery.


In OpenSSL 1.1.0 before 1.1.0d if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

KERNELBASE!FindSortHashNode+0x0000000000000040.\


On SRX Series devices a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D71 12.3X48 prior to 12.3X48-D55 15.1X49 prior to 15.1X49-D100 on SRX Series. No other Juniper Networks products or platforms are affected by this issue.


A

denial

of

service

vulnerability

in

telnetd

service

on

Juniper

Networks

Junos

OS

allows

remote

unauthenticated

attackers

to

cause

a

denial

of

service.

Affected

Junos

OS

releases

are:

prior

to

prior

to

prior

to

prior

to

prior

to

prior

to

prior

to

prior

to

prior

to

prior

to


sDNSProxy.exe ver1.1.0.0 and earlier allows remote attackers to cause a denial of service via unspecified vectors.


Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target. Repeated traffic in a cluster may cause repeated flip-flop failure operations or full failure to the flowd daemon halting traffic on all nodes. Only IPv6 traffic is affected by this issue. IPv4 traffic is unaffected. This issues is not seen with to-host traffic. This issue has no relation with HA services themselves only the ALG service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55 on SRX; 12.1X47 prior to 12.1X47-D45 on SRX; 12.3X48 prior to 12.3X48-D32 12.3X48-D35 on SRX; 15.1X49 prior to 15.1X49-D60 on SRX.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpCreateSplitBlock+0x000000000000053a.\


A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D45; 12.3X48 prior to 12.3X48-D30; 14.1 prior to 14.1R4-S9 14.1R8; 14.2 prior to 14.2R6; 15.1 prior to 15.1F5 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D232 15.1X53-D47.


When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c a denial of service (OOM) can occur in ReadDPXImage().


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!LdrpInsertDependencyRecord+0x0000000000000039.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!LdrpFindLoadedDllByName+0x00000000000000a5.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpInsertFreeBlock+0x00000000000001ca.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

COMCTL32!Tab_OnGetItem+0x000000000000002f.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!LdrpInitializeThread+0x000000000000010b.\


H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.


An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows \DHCP - Read overflow when decoding option 63\ and a denial of service.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

GDI32!GenericEngineGetGlyphs+0x0000000000000133.\


H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

COMCTL32!SetStatusText+0x0000000000000029.\


XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file related to \Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000233125.\


IrfanView

version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031.\


IrfanView

with

FPX

Plugin

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.fpx

file

related

to

\Data

from

Faulting

Address

is

used

as

one

or

more

arguments

in

a

subsequent

Function

Call

starting

at

FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b3ae.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

IMM32!ImmLockImeDpi+0x0000000000000050.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at


When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400 SRX3400 SRX3600 SRX5400 SRX5600 SRX5800 in high availability cluster configuration mode certain multicast packets might cause the flowd process to crash halting or interrupting traffic from flowing through the device and triggering RG1+ (data-plane) fail-over to the secondary node. Repeated crashes of the flowd process may constitute an extended denial of service condition. This service is not enabled by default and is only supported in high-end SRX platforms. Affected releases are Juniper Networks Junos OS 12.3X48 prior to 12.3X48-D45 15.1X49 prior to 15.1X49-D80 on SRX1400 SRX3400 SRX3600 SRX5400 SRX5600 SRX5800.


The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429.\


On all vSRX and SRX Series devices when the DHCP or DHCP relay is configured specially crafted packet might cause the flowd process to crash halting or interrupting traffic from flowing through the device(s). Repeated crashes of the flowd process may constitute an extended denial of service condition for the device(s). If the device is configured in high-availability the RG1+ (data-plane) will fail-over to the secondary node. If the device is configured in stand-alone there will be temporary traffic interruption until the flowd process is restored automatically. Sustained crafted packets may cause the secondary failover node to fail back or fail completely potentially halting flowd on both nodes of the cluster or causing flip-flop failovers to occur. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67 on vSRX or SRX Series; 12.3X48 prior to 12.3X48-D50 on vSRX or SRX Series; 15.1X49 prior to 15.1X49-D91 15.1X49-D100 on vSRX or SRX Series.


IrfanView

version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at


An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows \DHCP - Infinite read in dhcp_attr2vp()\ and a denial of service.


XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file related to \Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000013a20.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

a

\Read

Access

Violation

starting

at

GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb.\


If extended statistics are enabled via 'set chassis extended-statistics' when executing any operation that fetches interface statistics including but not limited to SNMP GET requests the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended denial of service condition. This issue only affects the following platforms: (1) EX2200 EX3300 XRE200 (2) MX Series routers with MPC7E/8E/9E PFEs installed and only if 'extended-statistics' are enabled under the edit chassis configuration. Affected releases are Juniper Networks Junos OS 14.1 prior to 14.1R8-S5 14.1R9 on MX Series; 14.1X53 prior to 14.1X53-D46 14.1X53-D50 on EX2200 EX3300 XRE200; 14.2 prior to 14.2R7-S9 14.2R8 on MX Series; 15.1 prior to 15.1F5-S8 15.1F6-S8 15.1R5-S3 15.1R6 on MX Series; 16.1 prior to 16.1R4-S5 16.1R5 16.1R6 on MX Series; 16.1X65 prior to 16.1X65-D45 on EX2200 EX3300 XRE200; 16.2 prior to 16.2R2-S1 16.2R3 on MX Series; 17.1 prior to 17.1R2-S2 17.1R3 on MX Series; 17.2 prior to 17.2R1-S3 17.2R2 on MX Series; 17.2X75 prior to 17.2X75-D50 on MX Series; 17.3 prior to 17.3R1-S1 17.3R2 on MX Series. No other Juniper Networks products or platforms are affected by this issue.


Xen through 4.8.x mishandles virtual interrupt injection which allows guest OS users to cause a denial of service (hypervisor crash) aka XSA-223.


StreamRelay.NET.exe ver2.14.0.7 and earlier allows remote attackers to cause a denial of service via unspecified vectors.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpCreateSplitBlock+0x0000000000000510.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4.\


XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file related to \Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!memcmp+0x0000000000000018\

(without

RPC

initialization).


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

KERNELBASE!StateObjectListFind+0x0000000000000005.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpRemoveUCRBlock+0x0000000000000046.\


The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references which allows guest OS users to cause a denial of service (loss of grant trackability) aka XSA-224 bug 3.


IrfanView

version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

an

\Invalid

Handle

starting

at

wow64!Wow64NotifyDebugger+0x000000000000001d.\


An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows \DHCP - Memory leak in decode_tlv()\ and a denial of service.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031.\


Juniper Networks Junos OS 16.1R1 and services releases based off of 16.1R1 are vulnerable to the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs which are transitive in nature this issue can only be triggered by a packet sent directly to the IP address of the router. Repeated crashes of the rpd daemon can result in an extended denial of service condition. This issue only affects devices running Junos OS 16.1R1 and services releases based off of 16.1R1 (e.g. 16.1R1-S1 16.1R1-S2 16.1R1-S3). No prior versions of Junos OS are affected by this vulnerability and this issue was resolved in Junos OS 16.2 prior to 16.2R1. No other Juniper Networks products or platforms are affected by this issue. This issue was found during internal product security testing.


IrfanView

with

FPX

Plugin

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.fpx

file

related

to

a

\Read

Access

Violation

starting

at


XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file related to \Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

MSCTF!_CtfImeCreateThreadMgr+0x00000000000000a8.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

a

\Read

Access

Violation

starting

at

ntdll_77df0000!LdrShutdownProcess+0x0000000000000130.\


An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows \Read / write overflow in make_secret()\ and a denial of service.


When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

(with

RPC

initialization).


Antiy Antivirus Engine 5.0.0.06281654 allows local users to cause a denial of service (BSOD) via a long third argument in a DeviceIoControl call.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpFreeHeap+0x0000000000000393.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

GDI32!ScriptStringAnalyse+0x00000000000001c8.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6.\


Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI which allows guest OS users to cause a denial of service (hypervisor crash) aka XSA-225.


IrfanView

version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at


An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows \DHCP - Memory leak in fr_dhcp_decode()\ and a denial of service.


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046.\


XnView

Classic

for

Windows

Version

might

allow

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.rle

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f.\


qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.


H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.


An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows \Infinite loop and memory exhaustion with 'concat' attributes\ and a denial of service.


Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.


read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.29 allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.


The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.


The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUJBIG2File!DllUnregisterServer+0x0000000000005578.\


An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0 triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.


An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash which leads to denial of service.


Memory leak in dnsmasq before 2.78 when the --add-mac --add-cpe-id or --add-subnet option is specified allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.


Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file related to \Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61\ on Windows. This occurs because xps_load_links_in_glyphs in xps/xps-link.c does not verify that an xps font could be loaded.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.djvu

file

related

to

\Data

from

Faulting

Address

is

used

as

one

or

more

arguments

in

a

subsequent

Function

Call

starting

at

STDUDjVuFile!DllUnregisterServer+0x000000000000328e.\


XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file related to \Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d.\


An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service (segmentation fault and application crash) or possibly unspecified other impact.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a.\


ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data leading to a denial of service (assertion failure in magick/pixel_cache.c and application crash).


XnView

Classic

for

Windows

Version

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77400000!RtlGetCurrentDirectory_U+0x000000000000016c.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.epub

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUEPubFile!DllUnregisterServer+0x0000000000039335.\


Artifex

GSView

Beta

on

Windows

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.pdf

file

related

to

\Possible

Stack

Corruption

starting

at

KERNELBASE!RaiseException+0x0000000000000068.\


IrfanView

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.svg

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at


The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8 2.3.x before 2.3.5 and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.


The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via a crafted BPG file related to improper interaction with copy_CTB_to_hv in hevc_filter.c in libavcodec in FFmpeg and sao_filter_CTB in hevc_filter.c in libavcodec in FFmpeg.


XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file related to \Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x00000000000090f1.\


XnView

Classic

for

Windows

Version

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77400000!RtlInterlockedPopEntrySList+0x000000000000039b.\


ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c allowing remote attackers to cause a denial of service via a crafted file.


decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.29 allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.


RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.


** DISPUTED ** Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid.


libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\\0' characters.


The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField and application crash) via a crafted file.


Multiple

XML

external

entity

(XXE)

vulnerabilities

in

the

OpenText

Documentum

Administrator

allow

remote

authenticated

users

to

list

the

contents

of

arbitrary

directories

read

arbitrary

files

cause

a

denial

of

service

or

on

Windows

obtain

Documentum

user

hashes

via

a

crafted

DTD

involving

unspecified

XML

structures

in

a

request

to

xda/com/documentum/ucf/server/transport/impl/GAIRConnector

or

crafted

XML

file

in

a

MediaProfile

file

import

or

check

in.


Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp to trigger this vulnerability.


The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.


_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.epub

file

related

to

\Data

from

Faulting

Address

is

used

as

one

or

more

arguments

in

a

subsequent

Function

Call

starting

at

STDUEPubFile!DllUnregisterServer+0x000000000003fff1.\


The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.


IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file related to \Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e.\


Artifex

GSView

Beta

on

Windows

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.pdf

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

mupdfnet64!mIncrementalSaveFile+0x000000000000344e.\


SaltStack Salt before 2016.3.8 2016.11.x before 2016.11.8 and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.


Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0 1.10.3 17.03.0 17.03.1 17.03.2 17.06.0 17.06.1 17.06.2 17.09.0 and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload aka gzip bombing.


GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships such as the admin<script> username versus the admin username related to register.php User.class.php and Type.class.php.


Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.29 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.xps

file

related

to

a

\Possible

Stack

Corruption

starting

at

Unknown

Symbol

called

from


There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.


process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.29 allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUJBIG2File!DllGetClassObject+0x00000000000064d7.\


An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash which leads to denial of service.


In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4 an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory which might allow remote attackers to obtain sensitive information or cause a denial of service (daemon crash) via a 'LIST \\ \Other Users\' command.


Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist as demonstrated by version HMI 2.41 PLC 2.42.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.xps

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUXPSFile!DllUnregisterServer+0x0000000000028657.\


A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.djvu

file

related

to

\Data

from

Faulting

Address

is

used

as

one

or

more

arguments

in

a

subsequent

Function

Call

starting

at

STDUDjVuFile!DllUnregisterServer+0x000000000000ec6e.\


Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting because certain cleanup is skipped if no pass-through device was ever assigned aka XSA-207.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402.\


IrfanView

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.ani

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

ntdll_77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4.\


OpenText

Document

Sciences

xPression

(formerly

EMC

Document

Sciences

xPression)

Patch

(older

versions

might

be

affected

as

well)

is

prone

to

an

XML

External

Entity

vulnerability:

An

unauthenticated

user

is

able

to

read

directory

listings

or

system

files

or

cause

SSRF

or

Denial

of

Service.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.djvu

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUDjVuFile!DllUnregisterServer+0x000000000000d9f2.\


Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges a different vulnerability than CVE-2017-14179.


The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.


Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory which is especially problematic if the files are then individually written in a separate thread to a slow storage resource as demonstrated by interaction between dataReceived (in core/downloader/handlers/http11.py) and S3FilesStore.


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.xps

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUXPSFile!DllUnregisterServer+0x0000000000005bd2.\


Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file related to \Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f\ on Windows. This occurs because of mishandling of XML tag name comparisons.


Multiple

XML

external

entity

(XXE)

vulnerabilities

in

the

OpenText

Documentum

Webtop

allow

remote

authenticated

users

to

list

the

contents

of

arbitrary

directories

read

arbitrary

files

cause

a

denial

of

service

or

on

Windows

obtain

Documentum

user

hashes

via

a

crafted

DTD

involving

unspecified

XML

structures

in

a

request

to

xda/com/documentum/ucf/server/transport/impl/GAIRConnector

or

crafted

XML

file

in

a

MediaProfile

file

import

or

check

in.


Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4001/tcp to trigger this vulnerability.


The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c.


The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.


IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file related to \Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613.\


STDU

Viewer

allows

attackers

to

cause

a

denial

of

service

or

possibly

have

unspecified

other

impact

via

a

crafted

.epub

file

related

to

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

STDUEPubFile!DllUnregisterServer+0x0000000000010332.\


The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request aka SAP Security Note 2389181.


Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion possibly gain root privileges or escape from containers.


XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file related to \Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e.\