A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final where host-controller tries to reconnect in a loop generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue leading to a denial of service. The highest threat from this vulnerability is to system availability.


A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted resulting in a denial of service. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.


An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR which is an Intel specific MSR this MSR read is performed without error handling for a #GP fault which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.


A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.


A

flaw

was

found

in

the

way

the

spice-vdagentd

daemon

handled

file

transfers

from

the

host

system

to

the

virtual

machine.

Any

unprivileged

local

guest

user

with

access

to

the

UNIX

domain

socket

path

`/run/spice-vdagentd/spice-vdagent-sock`

could

use

this

flaw

to

perform

a

memory

denial

of

service

for

spice-vdagentd

or

even

other

processes

in

the

VM

system.

The

highest

threat

from

this

vulnerability

is

to

system

availability.

This

flaw

affects

spice-vdagent

versions

and

previous

versions.


A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.


A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.


An issue was discovered in Hyland OnBase 16.0.2.83 and below 17.0.2.109 and below 18.0.0.37 and below 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote attackers to cause a denial of service (outage of connection-request processing) via a long user ID which triggers an exception and a large log entry.


An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.


Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).


The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() function. An attacker who invokes the web interface with a crafted URL can crash the process causing denial of service. This version of QCMAP is used in many kinds of networking devices primarily mobile hotspots and LTE routers.


A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further because the memory is used as pixel data and not e.g. a function pointer. This flaw affects ImageMagick versions prior to 7.0.9-0.


A

flaw

was

found

in

the

spice-vdagentd

daemon

where

it

did

not

properly

handle

client

connections

that

can

be

established

via

the

UNIX

domain

socket

in

`/run/spice-vdagentd/spice-vdagent-sock`.

Any

unprivileged

local

guest

user

could

use

this

flaw

to

prevent

legitimate

agents

from

connecting

to

the

spice-vdagentd

daemon

resulting

in

a

denial

of

service.

The

highest

threat

from

this

vulnerability

is

to

system

availability.

This

flaw

affects

spice-vdagent

versions

and

prior.


A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1 3.8 to 3.8.4 3.7 to 3.7.7 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2 3.8.5 3.7.8 and 3.5.14.


Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).


A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host resulting in a denial of service.


xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.


HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.


In TextView of TextView.java there is a possible app hang due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140218875


An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write and possibly a Denial of Service via network access.


receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code.


An issue was discovered in the Linux kernel through 5.9.1 as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0 aka CID-e99502f76271.


In process of C2SoftVorbisDec.cpp there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154302257


ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c which may cause a denial of service.


in SetImageExtent() of /MagickCore/image.c an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. The memory leak can be triggered by a crafted input file that is processed by ImageMagick and could cause an impact to application reliability such as denial of service. This flaw affects ImageMagick versions prior to 7.0.9-0.


A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs potentially causing a denial of service. The highest threat from this vulnerability is to system availability.


The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier when processing invalid multi-byte input sequences in IBM1364 IBM1371 IBM1388 IBM1390 and IBM1399 encodings fails to advance the input state which could lead to an infinite loop in applications resulting in a denial of service a different vulnerability from CVE-2016-10228.


Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and started again later.


A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that when processed by the 'pdftohtml' program would crash the application causing a denial of service.


Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screen_key display_name browser_name and operation_system parameter during the authentication process. This may crash the server and force Solstice-Pod to reboot which leads to a denial of service.


An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption) cause a data leak or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.


Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session.


Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack can be performed. For example a SQL injection can be used to execute the crafted SQL command sequence. After that some unexpected RAM data is read.


An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly parses a payload given a Content-Type header. A deep JSON structure sent to a valid POST endpoint (that may or may not expect JSON payloads) causes a StackOverflowError and Denial of Service.


Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox


A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.


There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks but the patch resolves issues in the MIFF coder which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.


An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read and possibly a Denial of Service via adjacent network access.


A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host resulting in a denial of service.


An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption) cause a data leak or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.


A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1 2.0.33.SP2 and 2.2.3.SP1.


A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of service.


SAP Commerce Cloud (Accelerator Payment Mock) versions - 1808 1811 1905 2005 allows an unauthenticated attacker to submit a crafted request over a network to a particular SAP Commerce module URL which will be processed without further interaction the crafted request can render the SAP Commerce service itself unavailable leading to Denial of Service with no impact on confidentiality or integrity.


The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).


Airleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial of service.


In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a query-of-death vulnerability via denial of service if users can control the input to the layer. This is fixed in versions 1.15.5 2.0.4 2.1.3 2.2.2 2.3.2 and 2.4.0.


Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service.


date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2 there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2.


Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.


In kdeconnect-kde (aka KDE Connect) before 20.08.2 an attacker on the local network could send crafted packets that trigger use of large amounts of CPU memory or network connection slots aka a Denial of Service attack.


Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference \homeserver\ implementation of Matrix. A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a `/send_join` `/send_leave` `/invite` or `/exchange_third_party_invite` request. This can lead to a denial of service in which future events will not be correctly sent to other servers over federation. This affects any server which accepts federation requests from untrusted servers. The Matrix Synapse reference implementation before version 1.23.1 the implementation is vulnerable to this injection attack. Issue is fixed in version 1.23.1. As a workaround homeserver administrators could limit access to the federation API to trusted servers (for example via `federation_domain_whitelist`).


Matrix Synapse before 1.20.0 erroneously permits non-standard NaN Infinity and -Infinity JSON values in fields of m.room.member events allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into the room's state the impact is long-lasting and is not fixed by an upgrade to a newer version requiring the event to be manually redacted instead. Since events are replicated to servers of other room members the impact is not constrained to the server of the event sender.


Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.


md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory and cause a denial of service (e.g. assertion failure) via a malformed Markdown document.


NETGEAR GS808E devices before 1.7.1.0 are affected by denial of service.


Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.


An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability by sending an Electronic Key Segment with less bytes than required by the Key Format Table.


An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000 Series B FRN 15.002 Series B FRN 15.000 Series B FRN 14.000 Series B FRN 13.000 Series B FRN 12.000 Series B FRN 11.000 and Series B FRN 10.000. A specially crafted packet can cause a major error resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.


SAP Mobile Platform version 3.0 does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving there is no issue of leaking content of files on the server.


A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by issuing a specific command. This affects: ZXCTN 6500 version V2.10.00R3B87.


An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages the compression pointer is followed without checking for recursion leading to a denial of service. An attacker can send an mDNS message to trigger this vulnerability.


SAP NetWeaver AS JAVA versions - (ENGINEAPI 7.10; WSRM 7.10 7.11 7.20 7.30 7.31 7.40 7.50; J2EE-FRMW 7.10 7.11) does not perform any authentication checks for a web service allowing the attacker to send several payloads and leading to complete denial of service.


SAP BusinessObjects Mobile (MobileBIService) version 4.2 allows an attacker to generate multiple requests using which he can block all the threads resulting in a Denial of Service.


SAP NetWeaver AS ABAP (Web Dynpro ABAP) versions (SAP_UI 750 752 753 754 and SAP_BASIS 700 710 730 731 804) allows an unauthenticated attacker to prevent legitimate users from accessing a service either by crashing or flooding the service leading to Denial of Service


An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.


An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.


An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability by sending an Electronic Key Segment with less than 0x18 bytes following the Key Format field.


Improper

input

validation

in

SAP

NetWeaver

Internet

Communication

Manager

(update

provided

in

KERNEL

allows

an

attacker

to

prevent

users

from

accessing

its

services

through

a

denial

of

service.


SAP NetWeaver (Guided Procedures) versions 7.10 7.11 7.20 7.30 7.31 7.40 7.50 does not sufficiently validate an XML document input from a compromised admin leading to Denial of Service.


An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability.


An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability.


An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability If the ANSI Extended Symbol Segment Sub-Type is supplied the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data the device enters a fault state where communication with the device is lost and a physical power cycle is required.


An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.


An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.If the Simple Segment Sub-Type is supplied the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data the device enters a fault state where communication with the device is lost and a physical power cycle is required.


Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations.


A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial of service.


SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer) versions 4.1 4.2 and Crystal Reports for VS version 2010 allows an attacker with basic authorization to perform deserialization attack in the application leading to service interruptions and denial of service and unauthorized execution of arbitrary commands leading to Deserialization of Untrusted Data.


An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation \.roa\ files or X509 Certificate Revocation List files from the RPKI relying party's view.


Microsoft Exchange Server Denial of Service Vulnerability


Arista EOS before 4.21.12M 4.22.x before 4.22.7M 4.23.x before 4.23.5M and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed.


Windows Error Reporting Denial of Service Vulnerability


Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting physical access to the PLC is required in order to restore production and the device state is lost. This is related to R04CPU RJ71GF11-T2 R04CPU and RJ71GF11-T2.


A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.


Azure Sphere Denial of Service Vulnerability


** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation \.roa\ files or X509 Certificate Revocation List files from the RPKI relying party's view. NOTE: some third parties may regard this as a preferred behavior not a vulnerability.


In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.


In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2 the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface and an availability problem for the microVM network interface on which the issue is triggered.


** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP fetches proceed even with a lack of validation of a TLS HTTPS endpoint. This allows remote attackers to bypass intended access restrictions or to trigger denial of service to traffic directed to co-dependent routing systems. NOTE: third parties assert that the behavior is intentionally permitted by RFC 8182.


A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.


A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.


meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server because a crafted map is mishandled during a vulnerable function call.


Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.


Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.


all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.


The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length N the size of percent_encodings may be up to O(N). The next step (normalize existing percent-encoded bytes) also takes up to O(N) for each step so the total time is O(N^2). If percent_encodings were deduplicated the time to compute _encode_invalid_chars would be O(kN) where k is at most 484 ((10+6*2)^2).


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.


**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of service attack if the user is not following documented guidelines pertaining to dedicated TriStation connection and key-switch protection. This vulnerability was discovered and remediated in versions v4.9.1 and v4.10.1 on May 30 2013. This feature is not present in version v4.9.1 and v4.10.1 through current. Therefore the vulnerability is not present in these versions.


A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects: MongoDB Server version 4.4 prior to 4.4.1. Versions before 4.4 are not affected.


An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.


An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.


A user authorized to perform database queries may cause denial of service by issuing specially crafted queries which violate an invariant in the query subsystem's support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.


A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary XML code and obtain disclosure of confidential data denial of service server side request forgery due to improper configuration of the XML parser.


A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340 Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.


An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.


schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server because a crafted map is mishandled during a GetValue call.


GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.


This affects the package find-my-way before 2.2.5 from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default and if versioned routes are not being used this could lead to a denial of service. Accept-Version can be used as an unkeyed header in a cache poisoning attack.


CODESYS Control V3 Gateway V3 and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.


Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.0-rc12; v4.2 versions prior to 4.2.9.


Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.


A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects: MongoDB Inc. MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.


The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.


The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer which would result in a denial of service condition.


A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior) which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller.


HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.


An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the application.


A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login multiple times resulting in a denial of service.


A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands gaining privileged access causing denial of service and changing the configuration.


pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.


A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user and when it's opened for writing chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system resulting in data loss and a denial of service due to the path traversal.


An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function Squid and the default certificate validation helper are vulnerable to a Denial of Service when opening a TLS connection to an attacker-controlled server for HTTPS. This occurs because unrecognized error values are mapped to NULL but later code expects that each error value is mapped to a valid error string.


Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service disclosure of user personal data and performing of unauthorized administrative operations.


Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10 v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4 v3.8.4rc1 v3.8.5 v3.8.6 v3.8.6rc1; v3.9.0 v3.9.0b4 v3.9.0b5 v3.9.0rc1 v3.9.0rc2.


An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service (infinite loop) aka MMSA-2020-0020.


An issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows attackers to cause a denial of service (client-side) aka MMSA-2020-0017.


An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.


A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown or otherwise rendered inaccessible until it is remounted leading to a denial of service. The highest threat from this vulnerability is to system availability.


In Windows cleaning assistant 3.2 the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA.


A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7 where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.


In Windows cleaning assistant 3.2 the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD.


Bitcoin Core 0.20.0 allows remote denial of service.


A flaw was found in the Restricted Security Context Constraints (SCC) where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerability is to system availability.


A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7 where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.


An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted which allows attackers to cause a denial of service aka MMSA-2020-0005.


A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.


GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself not that a crash may occur in code that is generated by Bison.


An issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow attackers to cause a denial of service (infinite loop) aka MMSA-2020-0021.


A vulnerability was found in RESTEasy where RootNode incorrectly caches routes. This issue results in hash flooding leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.


A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.


The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process causing a denial of service. This issue does not affect the upstream cmark project. The issue has been fixed in version 0.29.0.gfm.1.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which local pointer variables are not initialized and may be freed later which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4) version 9.x (prior to 9.4) and version 10.x (prior to 10.3).


In TensorFlow before 1.15.2 and 2.0.1 converting a string (from Python) to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker can send a data point which contains a string instead of a tf.float16 value. Similar effects can be obtained by manipulating saved models and checkpoints whereby replacing a scalar tf.float16 value with a scalar string will trigger this issue due to automatic conversions. This can be easily reproduced by tf.constant(\hello\ tf.float16) if eager execution is enabled. This issue is patched in TensorFlow 1.15.1 and 2.0.1 with this vulnerability patched. TensorFlow 2.1.0 was released after we fixed the issue thus it is not affected. Users are encouraged to switch to TensorFlow 1.15.1 2.0.1 or 2.1.0.


Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus (LC LS NX RC RC F) TOYOTA CAMRY and TOYOTA SIENNA manufactured in the regions other than Japan from Oct. 2016 to Oct. 2019. An attacker with certain knowledge on the target vehicle control system may be able to send some diagnostic commands to ECUs with some limited availability impacts; the vendor states critical vehicle controls such as driving turning and stopping are not affected.


Tendermint before versions 0.33.3 0.32.10 and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection it allocates XXX bytes. Even though this memory is garbage collected once the connection is terminated (due to duplicate IP or reaching a maximum number of inbound peers) temporary memory spikes can lead to OOM (Out-Of-Memory) exceptions. Additionally Tendermint does not reclaim activeID of a peer after it's removed in Mempool reactor. This does not happen all the time. It only happens when a connection fails (for any reason) before the Peer is created and added to all reactors. RemovePeer is therefore called before AddPeer which leads to always growing memory (activeIDs map). The activeIDs map has a maximum size of 65535 and the node will panic if this map reaches the maximum. An attacker can create a lot of connection attempts (exploiting above denial of service) which ultimately will lead to the node panicking. These issues are patched in Tendermint 0.33.3 and 0.32.10.


XACK DNS 1.11.0 to 1.11.4 1.10.0 to 1.10.8 1.8.0 to 1.8.23 1.7.0 to 1.7.18 and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack.


IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM X-Force ID: 193486.


Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series) GROWI versions prior to v4.1.12 (v4.1 Series) and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series) GROWI versions prior to v4.1.12 (v4.1 Series) and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors.


Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier) Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier) Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier RTX830 firmware Rev.15.02.09 and earlier RTX1200 firmware Rev.10.01.76 and earlier RTX1210 firmware Rev.14.01.33 and earlier RTX3500 firmware Rev.14.00.26 and earlier and RTX5000 firmware Rev.14.00.26 and earlier) Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier) and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors.


NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin in which there is the potential to execute privileged operations which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4) version 9.x (prior to 9.4) and version 10.x (prior to 10.3).


NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer (nvlddmkm.sys) scheduler in which the software does not properly limit the number or frequency of interactions that it has with an actor such as the number of incoming requests which may lead to denial of service.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which an input data size is not validated which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5) version 10.x (prior to 10.4) and version 11.0.


NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM leading to denial of service.


Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier allows remote attackers to cause a denial of service which may result in not being able to add newly detected attack source IP addresses as blocking targets for about 10 minutes via a specially crafted request.


Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively may be susceptible to a denial of service vulnerability which is a type of issue whereby a threat actor attempts to tie up the resources of a resident application thereby making certain functions unavailable.


Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop using CPU and potentially preventing other SmartConnect DNS responses.


Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which are not used during run time environment.


Feedgen (python feedgen) before 0.9.0 is susceptible to XML Denial of Service attacks. The *feedgen* library allows supplying XML as content for some of the available fields. This XML will be parsed and integrated into the existing XML tree. During this process feedgen is vulnerable to XML Denial of Service Attacks (e.g. XML Bomb). This becomes a concern in particular if feedgen is used to include content from untrused sources and if XML (including XHTML) is directly included instead of providing plain tex content only. This problem has been fixed in feedgen 0.9.0 which disallows XML entity expansion and external resources.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which an input data size is not validated which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4) version 9.x (prior to 9.4) and version 10.x (prior to 10.3).


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which an input data length is not validated which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5) version 10.x (prior to 10.4) and version 11.0.


Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V Q24DHCCPU-VG User Ethernet port (CH1 CH2): First 5 digits of serial number 21121 or before) MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1 CH2): First 2 digits of serial number 11 or before and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before) and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors.


Dell EMC Unity Dell EMC Unity XT and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability and cause a Denial of Service (Storage Processor Panic) by sending an out of order SSH protocol sequence.


IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906.


IBM MQ and MQ Appliance 7.1 7.5 8.0 9.0 LTS 9.1 LTS and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 177081.


IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment while configuring some of the network services. IBM X-Force ID: 179165.


IBM MQ IBM MQ Appliance IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error within the pubsub logic. IBM X-Force ID: 179081.


IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM X-Force ID: 188599.


The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 175067.


IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment or upgrade pertaining to xcat services. IBM X-Force ID: 179163.


The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 179987.


IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093.


IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID: 175409.


IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number of RPC requests to the mmfsd daemon which would cause the service to crash. IBM X-Force ID: 181991.


IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 190833.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 9.7 10.1 10.5 11.1 and 11.5 could allow a local attacker to perform unauthorized actions on the system caused by improper usage of shared memory. By sending a specially-crafted request an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989.


IBM MQ IBM MQ Appliance IBM MQ for HPE NonStop 8.0 9.1 CD and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a dynamic queue. IBM X-Force ID: 179080.


IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due to an error within the Queue processing function. IBM X-Force ID: 181563.


IBM MQ and MQ Appliance 8.0 9.1 LTS and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840.


IBM MQ 9.1 LTS 9.2 LTS and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages. IBM X-Force ID: 191747.


IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997.


IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM X-Force ID: 190973.


IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 9.7 10.1 10.5 11.1 and 11.5 is vulnerable to a denial of service caused by improper handling of Secure Sockets Layer (SSL) renegotiation requests. By sending specially-crafted requests a remote attacker could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507.


IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of ioctls on the device with invalid arguments. IBM X-Force ID: 181992.


IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during deployment or upgrade if GUI specific services are enabled. IBM X-Force ID: 179162.


IBM Automation Workstream Services 19.0.3 20.0.1 20.0.2 IBM Business Automation Workflow 18.0 19.0 and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.


The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.


The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures which allows an attacker to cause a denial of service via a malformed crash file.


In

Tensorflow

before

versions

and

the

`SparseFillEmptyRowsGrad`

implementation

has

incomplete

validation

of

the

shapes

of

its

arguments.

Although

and

are

accessed

in

a

similar

pattern

only

is

validated

to

be

of

proper

shape.

Hence

malicious

users

can

pass

a

bad

to

trigger

an

assertion

failure

in

`vec`

causing

denial

of

service

in

serving

installations.

The

issue

is

patched

in

commit

and

is

released

in

TensorFlow

versions

or


** DISPUTED ** Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports \Trustwave has signaled they are disputing our claims.\ The CVE suggests that there is a security issue with how ModSecurity handles regular expressions that can result in a Denial of Service condition. The vendor does not consider this as a security issue because1) there is no default configuration issue here. An attacker would need to know that a rule using a potentially problematic regular expression was in place 2) the attacker would need to know the basic nature of the regular expression itself to exploit any resource issues. It's well known that regular expression usage can be taxing on system resources regardless of the use case. It is up to the administrator to decide on when it is appropriate to trade resources for potential security benefit.


In

Argent

RecoveryManager

before

the

executeRecovery

function

does

not

require

any

signatures

in

the

zero-guardian

case

which

allows

attackers

to

cause

a

denial

of

service

(locking)

or

a

takeover.


ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.


An issue was discovered in Xen through 4.13.x allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU changes to them require flushing of both TLBs. Furthermore IOMMUs may be non-coherent and hence prior to flushing IOMMU TLBs a CPU cache also needs writing back to memory after changes were made. Such writing back of cached data was missing in particular when splitting large page mappings into smaller granularity ones. A malicious guest may be able to retain read/write DMA access to frames returned to Xen's free pool and later reused for another purpose. Host crashes (leading to a Denial of Service) and privilege escalation cannot be ruled out. Xen versions from at least 3.2 onwards are affected. Only x86 Intel systems are affected. x86 AMD as well as Arm systems are not affected. Only x86 HVM guests using hardware assisted paging (HAP) having a passed through PCI device assigned and having page table sharing enabled can leverage the vulnerability. Note that page table sharing will be enabled (by default) only if Xen considers IOMMU and CPU large page size support compatible.


Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0 v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic.


An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml it will trigger an unhandled exception resulting in a crash. Fixed in 2.20.1-0ubuntu2.24 2.20.9-0ubuntu7.16 2.20.11-0ubuntu27.6.


In

Tensorflow

before

version

the

`SparseCountSparseOutput`

implementation

does

not

validate

that

the

input

arguments

form

a

valid

sparse

tensor.

In

particular

there

is

no

validation

that

the

`indices`

tensor

has

rank

This

tensor

must

be

a

matrix

because

code

assumes

its

elements

are

accessed

as

elements

of

a

matrix.

However

malicious

users

can

pass

in

tensors

of

different

rank

resulting

in

a

`CHECK`

assertion

failure

and

a

crash.

This

can

be

used

to

cause

denial

of

service

in

serving

installations

if

users

are

allowed

to

control

the

components

of

the

input

sparse

tensor.

The

issue

is

patched

in

commit

and

is

released

in

TensorFlow

version


In

Tensorflow

before

versions

and

changing

the

TensorFlow's

`SavedModel`

protocol

buffer

and

altering

the

name

of

required

keys

results

in

segfaults

and

data

corruption

while

loading

the

model.

This

can

cause

a

denial

of

service

in

products

using

`tensorflow-serving`

or

other

inference-as-a-service

installments.

Fixed

were

added

in

commits

and

(both

going

into

TensorFlow

and

but

not

yet

backported

to

earlier

versions).

However

this

was

not

enough

as

reports

a

different

failure

mode.

The

issue

is

patched

in

commit

and

is

released

in

TensorFlow

versions

or


An issue was discovered in Xen through 4.13.x allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT (nested paging) tables Xen would in some circumstances use a series of non-atomic bitfield writes. Depending on the compiler version and optimisation flags Xen might expose a dangerous partially written PTE to the hardware which an attacker might be able to race to exploit. A guest administrator or perhaps even an unprivileged guest user might be able to cause denial of service data corruption or privilege escalation. Only systems using Intel CPUs are vulnerable. Systems using AMD CPUs and Arm systems are not vulnerable. Only systems using nested paging (hap aka nested paging aka in this case Intel EPT) are vulnerable. Only HVM and PVH guests can exploit the vulnerability. The presence and scope of the vulnerability depends on the precise optimisations performed by the compiler used to build Xen. If the compiler generates (a) a single 64-bit write or (b) a series of read-modify-write operations in the same order as the source code the hypervisor is not vulnerable. For example in one test build using GCC 8.3 with normal settings the compiler generated multiple (unlocked) read-modify-write operations in source-code order which did not constitute a vulnerability. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code-generation options). The source code clearly violates the C rules and thus should be considered vulnerable.


In etcd before versions 3.3.23 and 3.4.10 the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However it is possible to include the gateway address as an endpoint. This results in a denial of service since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway.


An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against the worst case of an untrusted schema should be a denial of service not execution of code.)


In

TensorFlow

Lite

before

versions

and

models

using

segment

sum

can

trigger

a

denial

of

service

by

causing

an

out

of

memory

allocation

in

the

implementation

of

segment

sum.

Since

code

uses

the

last

element

of

the

tensor

holding

them

to

determine

the

dimensionality

of

output

tensor

attackers

can

use

a

very

large

value

to

trigger

a

large

allocation.

The

issue

is

patched

in

commit

and

is

released

in

TensorFlow

versions

or

A

potential

workaround

would

be

to

add

a

custom

`Verifier`

to

limit

the

maximum

value

in

the

segment

ids

tensor.

This

only

handles

the

case

when

the

segment

ids

are

stored

statically

in

the

model

but

a

similar

validation

could

be

done

if

the

segment

ids

are

generated

at

runtime

between

inference

steps.

However

if

the

segment

ids

are

generated

as

outputs

of

a

tensor

during

inference

steps

then

there

are

no

possible

workaround

and

users

are

advised

to

upgrade

to

patched

code.


Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wired Infrastructure and Networking


An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.


Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto Snapdragon Mobile


Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon IoT Snapdragon Mobile Snapdragon Wearables


An issue was discovered in Xen through 4.13.x allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to return 0 for success and a negative number for errors. The fix for CVE-2017-12135 introduced a path through grant copy handling where success may be returned to the caller without any action taken. In particular the status fields of individual operations are left uninitialised and may result in errant behaviour in the caller of GNTTABOP_copy. A buggy or malicious guest can construct its grant table in such a way that when a backend domain tries to copy a grant it hits the incorrect exit path. This returns success to the caller without doing anything which may cause crashes or other incorrect behaviour.


libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).


Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wired Infrastructure and Networking


An issue was discovered in Xen through 4.13.x allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that when a backend domain tries to map a grant it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.


load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free which can cause a denial of service.


In nghttp2 before version 1.41.0 the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14 400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback and if received frame is SETTINGS frame and the number of settings entries are large (e.g. > 32) then drop the connection.


SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.


Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wired Infrastructure and Networking


libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).


RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Mobile


Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable causing a denial of service.


Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music


In the settings app there is a possible app crash due to improper input validation. This could lead to local denial of service of the Settings app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136005061


In libstagefright there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123237930


In Parse_art of eas_mdls.c there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127312550


In libmp4extractor there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777526


In the System UI there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-33646131


Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access.


In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526959


A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0751.


In addEscrowToken of LockSettingsService.java there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168692734


In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124525515


In libstagefright there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427


Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77 11.12.77 11.22.77 12.0.64 13.0.32 14.0.33 and Intel(R) TXE versions before 3.1.75 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access.


In Message and toBundle of Notification.java there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-158304295


In RegisterNotificationResponse::GetEvent of register_notification_packet.cc there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144066833


In parseTrackFragmentRun of MPEG4Extractor.cpp there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124389881


In libmedia there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132274514


In Parse_lins of eas_mdls.c there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313764


In libstagefright there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124940460


In CellBroadcastReceiver's intent handlers there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-162741784


In readBlock of MatroskaExtractor.cpp there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156819528


A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.


Uncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable denial of service via local access.


In parseChunk of MPEG4Extractor.cpp there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127973550


A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability an attacker who already has a privileged account on a guest operating system running as a virtual machine could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests. aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0661.


In LocaleList of LocaleList.java there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152410253


A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability an attacker who already has a privileged account on a guest operating system running as a virtual machine could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests. aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0890.


In Parse_lart of eas_mdls.c there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313223


In libstagefright there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982


In RTTTL_Event of eas_rtttl.c there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383


Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107 15.45.29.5077 and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access.


In XMF_ReadNode of eas_xmf.c there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126380818


In netd there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137346580


In ihevcd_ref_list() of ihevcd_ref_list.c there is a possible infinite loop due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141688974


In libstagefright there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537


In IMY_Event of eas_imelody.c there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127310810


A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability an attacker who already has a privileged account on a guest operating system running as a virtual machine could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests. aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0904.


In Parse_ptbl of eas_mdls.c there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313537


Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100 15.36.38.5117 15.40.44.5107 15.45.30.5103 and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service via local access.


In removeUnusedPackagesLPw of PackageManagerService.java there is a possible permanent denial-of-service due to a missing package dependency test. This could lead to remote denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141413692


In setRequirePmfInternal of sta_network.cpp there is a possible default value being improperly applied due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142797954


In generateCrop of WallpaperManagerService.java there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120847476


In setSyncSampleParams of SampleTable.cpp there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124771364


In libmkvextractor there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141860394


In ihevcd_decode() of ihevcd_decode.c there is possible resource exhaustion due to an infinite loop. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139939283


In Threshold::getHistogram of ImageProcessHelper.java there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1Android ID: A-156087409


In Message and toBundle of Notification.java there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of service if a malicious contact file is received with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-147358092


A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets. aka 'Windows Hyper-V Denial of Service Vulnerability'.


Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to restore administrative control) via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request to the cgi-bin/set_factory URI.


An issue was discovered in Xen XAPI before 2020-12-15. Certain xenstore keys provide feedback from the guest and are therefore watched by toolstack. Specifically keys are watched by xenopsd and data are forwarded via RPC through message-switch to xapi. The watching logic in xenopsd sends one RPC update containing all data any time any single xenstore key is updated and therefore has O(N^2) time complexity. Furthermore message-switch retains recent (currently 128) RPC messages for diagnostic purposes yielding O(M*N) space complexity. The quantity of memory a single guest can monopolise is bounded by xenstored quota but the quota is fairly large. It is believed to be in excess of 1G per malicious guest. In practice this manifests as a host denial of service either through message-switch thrashing against swap or OOMing entirely depending on dom0's configuration. (There are no quotas in xenopsd to limit the quantity of keys that result in RPC traffic.) A buggy or malicious guest can cause unreasonable memory usage in dom0 resulting in a host denial of service. All versions of XAPI are vulnerable. Systems that are not using the XAPI toolstack are not vulnerable.


GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10 self->code_table10.extends will assign the value 11 to c. The next execution in the loop will assign self->code_table11.extends to c which will give the value of 10. This will make the loop run infinitely. This bug can for example be triggered by calling this function with a GIF image with LZW compression that is crafted in a special way.


A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.


An issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored a owner could give a node away. However node ownership has quota implications. Any guest can run another guest out of quota or create an unbounded number of nodes owned by dom0 thus running xenstored out of memory A malicious guest administrator can cause a denial of service against a specific guest or against the whole host. All systems using oxenstored are vulnerable. Building and using oxenstored is the default in the upstream Xen distribution if the Ocaml compiler is available. Systems using C xenstored are not vulnerable.


An

issue

was

discovered

on

CDATA

and

devices.

It

allows

remote

attackers

to

cause

a

denial

of

service

(reboot)

by

sending

random

bytes

to

the

telnet

server

on

port

aka

a

\shawarma\

attack.


Dell EMC Unity Unity XT and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially exploit this vulnerability and cause Denial of Service (Storage Processor Panic) by sending specially crafted UDP requests.


An issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation the internal representation of the tree has special cases for the root node because this node has no parent. Unfortunately permissions were not checked for certain operations on the root node. Unprivileged guests can get and modify permissions list and delete the root node. (Deleting the whole xenstore tree is a host-wide denial of service.) Achieving xenstore write access is also possible. All systems using oxenstored are vulnerable. Building and using oxenstored is the default in the upstream Xen distribution if the Ocaml compiler is available. Systems using C xenstored are not vulnerable.


MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request.


An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some cases this attack may consume the available database space (Denial of Service) corrupt legitimate data if files are being processed asynchronously or deny access to legitimate uploaded files.


CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition.


An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption) cause a data leak or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.


The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32 when converting UCS4 text containing an irreversible character fails an assertion in the code path and aborts the program potentially resulting in a denial of service.


Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user and allows a denial of service because root-owned files can be overwritten.


** DISPUTED ** An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no \guarantees that allowing untrusted LoRa gateways to the network should still result in a secure network.\


This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness or denial-of-service by unauthenticated users will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution when limited to account holders are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.


NLnet Labs Unbound up to and including version 1.12.0 and NLnet Labs NSD up to and including version 4.3.3 contain a local vulnerability that would allow for a local symlink attack. When writing the PID file Unbound and NSD create the file if it is not there or open an existing file for writing. In case the file was already present they would follow symlinks if the file happened to be a symlink instead of a regular file. An additional chown of the file would then take place after it was written making the user Unbound/NSD is supposed to run as the new owner of the file. If an attacker has local access to the user Unbound/NSD runs as she could create a symlink in place of the PID file pointing to a file that she would like to erase. If then Unbound/NSD is killed and the PID file is not cleared upon restarting with root privileges Unbound/NSD will rewrite any file pointed at by the symlink. This is a local vulnerability that could create a Denial of Service of the system Unbound/NSD is running on. It requires an attacker having access to the limited permission user Unbound/NSD runs as and point through the symlink to a critical file on the system.


An

issue

was

discovered

in

in

the

Linux

kernel

through

Local

attackers

on

systems

with

the

speakup

driver

could

cause

a

local

denial

of

service

attack

aka

This

occurs

because

of

an

invalid

free

when

the

line

discipline

is

used

more

than

once.


An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file leading the application to crash (denial of service).


Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.


** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324 as used in scikit-learn 0.23.2 and other products allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle json or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.


OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.


A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.


This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.


Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations an attacker should trick the user into installing a malicious application successful exploit could cause reboot of the smartphone.


ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.


There is a denial of service vulnerability in some Huawei products. Due to improper memory management memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800 V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200 V800R011C00SPC300 V800R011C10SPC100; NE40E-F versions V800R011C00SPC200 V800R011C10SPC100; NE40E-M versions V800R011C00SPC200 V800R011C10SPC100.


An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically the backtrace function did not properly check the array bounds when storing the frame address resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.


On High-End SRX Series devices in specific configurations and when specific networking events or operator actions occur an SPC receiving genuine multicast traffic may core. Subsequently all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This issue affects: Juniper Networks Junos OS 12.3X48 version 12.3X48-D80 and later versions prior to 12.3X48-D95 on High-End SRX Series. This issue does not affect Branch SRX Series devices.


Huawei products NIP6800 versions V500R001C30 V500R001C60SPC500 and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600 V500R001C60SPC500 and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600 V500R001C60SPC500 and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established result in a denial of service.


A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability an attacker who already has a privileged account on a guest operating system running as a virtual machine could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests. aka 'Windows Hyper-V Denial of Service Vulnerability'.