LoboEvolution

version

contains

a

XML

External

Entity

(XXE)

vulnerability

in

XML

Parsing

when

viewing

the

XML

file

in

the

browser

that

can

result

in

disclosure

of

confidential

data

denial

of

service

server

side

request

forgery.

This

attack

appear

to

be

exploitable

via

Specially

crafted

XML

file.


codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data denial of service SSRF port scanning. This attack appear to be exploitable via specially crafted GSA XML files. This vulnerability appears to have been fixed in after commit faa265b.


The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.


The COSPAS-SARSAT protocol allows remote attackers to forge messages replay encrypted messages conduct denial of service attacks and send private messages (unrelated to distress alerts) via a crafted 406 MHz digital signal.


An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow.


OCS Inventory 2.4.1 lacks a proper XML parsing configuration allowing the use of external entities. This issue can be exploited by an attacker sending a crafted HTTP request in order to exfiltrate information or cause a Denial of Service.


The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls resulting in a denial of service or potential code execution.


libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.


tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture.


TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.


libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.


Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0 3.6.0 through 3.6.6 3.5.0 through 3.5.6 3.4.0 through 3.4.9 2.7.0 through 2.7.15.


The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.


A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12 4.8.7 and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry leading to denial of service.


get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).


When using the Linux bridge ml2 driver non-privileged tenants are able to create and attach ports without specifying an IP address bypassing IP address validation. A potential denial of service could occur if an IP address conflicting with existing guests or routers is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2 12.0.3 and 11.0.5 are vulnerable.


The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.


The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit) as demonstrated by SoundStretch.


An issue was discovered in the Linux kernel through 4.17.11 as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.


Division-by-zero vulnerabilities in the functions pi_next_pcrl pi_next_cprl and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).


In Bento4 v1.5.1-624 AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file.


An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks which could lead to denial of service (uninitialized data dereference and application crash).


An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.


In Kamailio before 5.0.7 and 5.1.x before 5.1.4 a crafted SIP message with a double \To\ header and an empty \To\ tag causes a segmentation fault and crash. The reason is missing input validation in the \build_res_buf_from_sip_req\ core function. This could result in denial of service and potentially the execution of arbitrary code.


It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4 as shipped with Red Hat Gluster Storage was vulnerable to a format string attack. A remote authenticated attacker could use this flaw to cause remote denial of service.


drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join which allows attackers to cause a denial of service (use-after-free).


libxml2 2.9.8 if --with-lzma is used allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR as demonstrated by xmllint a different vulnerability than CVE-2015-8035 and CVE-2018-9251.


wancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption) via a checkcode (aka verification code) URI in which the values of font_size width and height are large numbers.


The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit) as demonstrated by SoundStretch.


PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.


On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1 when a specifically configured virtual server receives traffic of an undisclosed nature TMM will crash and take the configured failover action potentially causing a denial of service. The configuration which exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0 BIG-IP will crash if the configuration which exposes this issue is enabled and the virtual server receives non TCP traffic. With the fix of this issue additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. There is only data plane exposure to this issue with a non-standard configuration. There is no control plane exposure.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E024. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e010. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


In Libav through 12.2 there is an invalid memcpy call in the ff_mov_read_stsd_entries function of libavformat/mov.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) and program failure with a crafted avi file.


The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service (agent restart) via crafted UDP packets.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e00c. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


Through undisclosed methods on F5 BIG-IP 13.0.0-13.1.0.7 12.1.0-12.1.3.5 11.6.0-11.6.3.1 or 11.2.1-11.5.6 adjacent network attackers can cause a denial of service for VCMP guest and host systems. Attack must be sourced from adjacent network (layer 2).


Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.


ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (router unreachable/unresponsive) via a flood of fragmented UDP packets.


In Malwarefox Anti-Malware 2.72.169 the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.


On F5 BIG-IP 14.0.0 13.0.0-13.1.0 12.1.0-12.1.3 or 11.5.1-11.6.3 specifically crafted HTTP responses when processed by a Virtual Server with an associated QoE profile that has Video enabled may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of Service.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e02c. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch SoftControl/SafenSoft TPSecure SoftControl/SafenSoft Enterprise Suite before version 4.4.1 allows local users to cause a denial of service (BSOD) or modify kernel-mode memory via loading of a forged DLL into an user-mode process.


In Xen 4.10 new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e008. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.


Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.


Hancom Office 2018 10.0.0.8214 and earlier Hancom Office NEO 9.6.1.10472 and earlier Hancom Office 2014 9.1.1.4540 and earlier Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e000. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface.


A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c even when stale-answer-enable is off. Additionally problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation -- either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e014. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote Unauthenticated \Global\ Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.


The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via vectors involving TLS.


qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e018. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote Unauthenticated Denial of Service in the RIM (Radio Interface Module) process running on the WiNG Access Point via crafted packets.


The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of \Capabilities\ in BGP OPEN messages in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI causing a denial of service.


** DISPUTED ** In Malwarebytes Premium 3.3.1.2183 the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e004. NOTE: the vendor reported that they \have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).\


In Malwarefox Anti-Malware 2.72.169 the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.


The Linux kernel versions 3.9+ is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.


In MuPDF 1.12.0 there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.


The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6 from version 7.7.0 before version 7.7.4 from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.


In LibTIFF 4.0.9 there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.


The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.


An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server resulting in a denial of service. An attacker can send an HTTP POST request to trigger this vulnerability.


An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \UIKit\ component. It allows remote attackers to cause a denial of service via a crafted text file.


An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the \Safari\ component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.


A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1 iOS 12.1. Processing a maliciously crafted message may lead to a denial of service.


An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. watchOS before 4.2.2 is affected. The issue involves the \LinkPresentation\ component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message.


An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \Messages\ component. It allows remote attackers to cause a denial of service via a crafted message.


An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \CoreText\ component. It allows remote attackers to cause a denial of service (application crash) via a crafted string.


An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the \Messages\ component. It allows remote attackers to cause a denial of service via a crafted message.


JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name and Security Key fields.


Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firmware version 3.5.30.1118.


PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service (page update outage) via crafted PHP and JavaScript code in the \Current Position\ field.


PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name Last Name or Address field.


An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204F.


PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.


An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface aka KONE-04.


An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x80002043.


An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204B.


Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhone(issue 1 of 2).


On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. The configuration which exposes this condition is the BIG-IP self IP address which is part of a VLAN group and has the Port Lockdown setting configured with anything other than \allow-all\.


An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000205B.


An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features some of which virtualise cleanly but some do not. In particular Branch Trace Store is not virtualised by the processor and software has to be careful to configure it suitably not to lock up the core. As a result it must only be available to fully trusted guests. Unfortunately in the case that vPMU is disabled all value checking was skipped allowing the guest to choose any MSR_DEBUGCTL setting it likes. A malicious or buggy guest administrator (on Intel x86 HVM or PVH) can lock up the entire host causing a Denial of Service.


libpango in Pango 1.40.8 through 1.42.3 as used in hexchat and other products allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.


An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.1118.


A vulnerability in the \capro\ (Call Processor) process component of Avaya Aura Communication Manager could allow a remote unauthenticated user to cause denial of service. Affected versions include 6.3.x all 7.x versions prior to 7.1.3.2 and all 8.x versions prior to 8.0.1.


** DISPUTED ** Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions.


** DISPUTED ** Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-16310. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions.


qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.


Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).


An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.


An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.


In ImageMagick 7.0.8-11 Q16 a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.


An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x80002067.


Spring Framework version 5.1 versions 5.0.x prior to 5.0.10 versions 4.3.x prior to 4.3.20 and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges or with wide ranges that overlap or both for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS CSS images and others) or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable.


An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation violation leading to denial of service.


** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an \Edit color palette\ search that triggers an \index out of range\ condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary.


qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX which allows attackers to cause a denial of service or possibly have unspecified other impact.


A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file because of incorrect protection against division by zero. It could allow a remote denial of service attack.


A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file because of incorrect protection against division by zero. It could allow a remote denial of service attack.


The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact as demonstrated by SoundStretch.


An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_zalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.


The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages IPPROTO_AH packets and IPPROTO_IP packets which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications as demonstrated on CentOS 7.


CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function leading to Denial of service.


The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit) as demonstrated by SoundStretch.


An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.


ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a single \GET / HTTP/1.1\\r\\n\ line.


Bitcoin Core 0.14.x before 0.14.3 0.15.x before 0.15.2 and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash.


An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c which can cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.


The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.


Yokogawa STARDOM Controllers FCJ FCN-100 FCN-RTU FCN-500 All versions R4.10 and prior The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions.


The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact as demonstrated by SoundStretch.


A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file because of incorrect protection against division by zero. It could allow a remote denial of service attack.


EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager a local attacker could exploit this vulnerability to kill the process or launch new processes at will.


ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.


An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file.


In nProtect AVS V4.0 before 4.0.0.39 the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458.


The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10 as used in ImageMagick 7.0.7-22 Q16 and other products allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image.


The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.


In FreeBSD before 11.1-STABLE 11.2-RELEASE-p2 11.1-RELEASE-p13 ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.


The

function

in

in

strongSwan

allows

remote

attackers

to

cause

a

denial

of

service

via

a

crafted

RSASSA-PSS

signature

that

lacks

a

mask

generation

function

parameter.


The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service (application crash) via a crafted (a) web page (b) office document or (c) .rtf file.


The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2 and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service or possibly escalate privileges if kernel symlink restrictions were disabled.


In Sophos Tester Tool 3.2.0.7 Beta the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address the driver will cause a Blue Screen of Death. If a program or malware does this at boot time it can cause a persistent denial of service on the machine.


In WatchDog Anti-Malware 2.74.186.150 the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.


The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file.


Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service


Denial of Service vulnerability in Micro Focus Operations Orchestration Software version 10.x. This vulnerability could be remotely exploited to allow Denial of Service.


The SAML2 library before 1.10.4 2.x before 2.3.5 and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.


Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion possibly gain root privileges or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv1 with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7 2.20.7-0ubuntu3.7 2.20.7-0ubuntu3.8 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17 and 2.14.1-0ubuntu3.28.


BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an \insecurely created named pipe\. Ensures full access to Everyone users group.


In nProtect AVS V4.0 before 4.0.0.39 the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20.


Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.


The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.


In WordPress through 4.9.2 unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.


Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams


In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23 each redmap greenmap and bluemap variable can be overwritten by a new pointer. The previous pointer is lost which leads to a memory leak. This allows remote attackers to cause a denial of service.


pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack which allows remote attackers to cause a denial of service via a crafted PDF document.


In nProtect AVS V4.0 before 4.0.0.39 the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.


The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.


A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293 WhatsApp for iOS prior to v2.18.93 and WhatsApp for Windows Phone prior to v2.18.172.


The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability allowing remote attackers to read memory or cause a denial of service.


In nProtect AVS V4.0 before 4.0.0.39 the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c.


In ZZIPlib 0.13.67 there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.


Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \\.\\pipe\\PSANMSrvcPpal -- an \insecurely created named pipe.\ Ensures full access to Everyone users group.


An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit) and denial of service for Windows 8 and 10.


Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \\\\.\\pipe\\WPSCloudSvr\\WpsCloudSvr -- an \insecurely created named pipe.\ Ensures full access to Everyone users group.


NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an actor access to restricted functionality that is unnecessary to production usage and which may result in denial of service.


The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.


The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket.


The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.30 has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.


Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams


The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file because a pixel staging area is not used.


The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an _copy call which allows remote attackers to cause a denial of service (access violation and application crash) via a crafted (a) web page (b) office document or (c) .rtf file.


In WatchDog Anti-Malware 2.74.186.150 the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.


CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors.


NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by sending exactly 11 bytes.


Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.10 6.4.x before 6.4.7 and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to cause a denial of service via a crafted HTTP request.


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus.


Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340 Premium Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request.


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus.


wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file.


The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.


A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040 all versions before V2.90 and Modicon Ethernet Module BMENOC0301 all versions before V2.16 which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service.


The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property which allows remote attackers to cause a denial of service (overflow insufficient memory allocation and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.


WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.


A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service or in extreme cases to load a malicious firmware.


Memory

leak

in

the

function

in

in

the

Linux

kernel

through

allows

local

users

to

cause

a

denial

of

service

(memory

consumption)

via

many

read

accesses

to

files

in

the

directory

as

demonstrated

by

the

file.


index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.


Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS \Boron\) 8.x (LTS \Carbon\) and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.


An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a crafted HTTP request.


An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service (segmentation violation) via a crafted file.


The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order which allows attackers to cause a denial of service or possibly have unspecified other impact.


A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus.


Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.


SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service (daemon crash) via an invalid LIST STOR or RETR command.


The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data.


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.


An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash which leads to denial of service.


A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus


The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file which allows remote attackers to cause a denial of service (memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c).


INVT Studio 1.2 allows remote attackers to cause a denial of service during import operations.


An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1.


The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.


There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation an attacker could send crafted message to the device successful exploit could cause a denial of service condition.


ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the \received\ timestamp which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.


The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.


Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking as demonstrated by pdftohtml.


An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c which will lead to a denial of service attack.


Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11 and 6.4.x before 6.4.8; and Splunk Light before 6.5.0 allow remote attackers to cause a denial of service via a malformed HTTP request.


A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus


A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus.


CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50 Modicon M340 with firmware prior to V3.01 BMxCRA312xx with firmware prior to V2.40 All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet which could cause a denial of service to the device that would force a restart to restore availability.


HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.


The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the \other side\ of an interleaved association causing the victim ntpd to reset its association.


An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.


An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables not streams.


A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus.


The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.


A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board MiCOM P540D Range with Legacy Ethernet Board and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.


In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.30 an index is not validated which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file as demonstrated by objcopy of a COFF object.


** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password and when no other clients are connected to this interface attackers can execute arbitrary management commands obtain sensitive information or cause a denial of service (SIGTERM) by triggering XMLHttpRequest actions in a web browser. This is demonstrated by a multipart/form-data POST to http://localhost:23000 with a \signal SIGTERM\ command in a TEXTAREA element. NOTE: The vendor disputes that this is a vulnerability. They state that this is the result of improper configuration of the OpenVPN instance rather than an intrinsic vulnerability and now more explicitly warn against such configurations in both the management-interface documentation and with a runtime warning.


A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90 iLO 4 prior to v2.60 iLO 5 prior to v1.30 Moonshot Chassis Manager firmware prior to v1.58 and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service.


Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580 Modicon M340 Modicon Quantum Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.


Quick Emulator (aka QEMU) when built with the Cirrus CLGD 54xx VGA Emulator support allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.


An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.


A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service when using a Telnet connection.


Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The \hub\ will stop operating and be frozen until the flood stops. During the flood the user won't be able to turn on/off the lights and all of the hub's functionality will be unresponsive. The cloud service also won't work with the hub.


dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer underflow or overflow and application crash) via an ELF file with a corrupt DWARF FORM block as demonstrated by nm.


XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file related to AcroForm::scanField as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.


A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.


In ImageMagick 7.0.7-29 and earlier a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.


In Kamailio before 5.0.7 and 5.1.x before 5.1.4 a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code.


Samba from version 4.3.0 and before versions 4.7.12 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort() terminating the KDC process.


The functions ReadDCMImage in coders/dcm.c ReadPWPImage in coders/pwp.c ReadCALSImage in coders/cals.c and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function which allows remote attackers to cause a denial of service via a crafted image file.


PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service (resource consumption) via a crafted x:xmpmeta structure a related issue to CVE-2003-1564.


ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.


Samba from version 4.0.0 and before versions 4.7.12 4.8.7 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached the Samba process providing the LDAP service will follow the NULL pointer terminating the process. There is no further vulnerability associated with this issue merely a denial of service.


In WAVM through 2018-07-26 a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified \heap-buffer-overflow\ condition in IR::FunctionValidationContext::end.


In Jingyun Antivirus v2.4.2.39 the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12364020.


The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write.


Michael Roth Software Personal FTP Server (PFTP) through 8.4f allows remote attackers to cause a denial of service (daemon crash) via an unspecified sequence of FTP commands.


Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting projects or inventory files.


An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c which will lead to a denial of service attack.


In Jingyun Antivirus v2.4.2.39 the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094 a related issue to CVE-2018-16305.


In

WAVM

through

a

crafted

file

sent

to

the

WebAssembly

Virtual

Machine

may

cause

a

denial

of

service

(application

crash)

or

possibly

have

unspecified

other

impact

because

libRuntime.so!llvm::InstructionCombiningPass::runOnFunction

is

mishandled.


In WAVM through 2018-07-26 a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified \heap-buffer-overflow\ condition in FunctionValidationContext::else_.


Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.


The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.


A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.


Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses as demonstrated by macof.


PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface change) via an inverted comma.


There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11 which allows remote attackers to cause a denial of service via a crafted image.


In Jingyun Antivirus v2.4.2.39 the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c a related issue to CVE-2018-16304.


Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server the internal DNS server or the Samba DLZ plugin for BIND9 if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue merely a denial of service.


In

WAVM

through

a

crafted

file

sent

to

the

WebAssembly

Virtual

Machine

may

cause

a

denial

of

service

(application

crash)

or

possibly

have

unspecified

other

impact

because

of

an

unspecified

\heap-buffer-overflow\

condition

in

FunctionValidationContext::popAndValidateOperand.


The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.


In Jingyun Antivirus v2.4.2.39 the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00221482.


** DISPUTED ** Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-15907. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions.


The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a ZIP bomb.


Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50) CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50) CENTUM VP(R4.01.00 - R6.03.10) CENTUM VP Entry Class(R4.01.00 - R6.03.10) Exaopc(R3.10.00 - R3.75.00) PRM(R2.06.00 - R3.31.00) ProSafe-RS(R1.02.00 - R4.02.00) FAST/TOOLS(R9.02.00 - R10.02.00) B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open Communication Driver's communication via unspecified vectors.


A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.


Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.


In Lizard (formerly LZ5) 2.0 use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c related to LZ5_compress_fastSmall and MEM_read32. The vulnerability causes a segmentation fault and application crash which leads to denial of service.


libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.


** DISPUTED ** OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with \blind port forwarding ... Putting OctoPrint onto the public internet is a terrible idea and I really can't emphasize that enough.\


There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11 which allows remote attackers to cause a denial of service via a crafted image file.


In Jingyun Antivirus v2.4.2.39 the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360090 a related issue to CVE-2018-16306.


In Etherpad < 1.8.3 a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denial of service (crash the instance).


An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They allows attackers to cause a denial of service (unlock failure) by triggering a power-shortage incident that causes a false-positive attack detection. The Samsung ID is SVE-2020-19678 (December 2020).


A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request but omitting the ACK messages or just tamper with jboss-remoting code deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.


srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS address.


A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide potentially causing a denial of service. The highest threat from this vulnerability is to system availability.


The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also the name of the directory created must use a Syslog field. (For example on Linux it is not possible to create a .. directory. On Windows it is not possible to create a CON directory.)


The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices and allows external attackers to force device reboots by sending concurrent connections aka a denial of service attack.


A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with access to the NFS could use this flaw to starve the resources causing denial of service.


The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests potentially allowing denial of service attacks.


NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.


subconverter

has

a

/sub?target=%TARGET%&url=%URL%&config=%CONFIG%

API

endpoint

that

accepts

an

arbitrary

%URL%

value

and

launches

a

GET

request

for

it

but

does

not

consider

that

the

external

request

target

may

indirectly

redirect

back

to

this

original

/sub

endpoint.

Thus

a

request

loop

and

a

denial

of

service

may

occur.


An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (December 2020).


A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Information Transfer' command (CMD_TI). This flaw allows a privileged guest user to crash the QEMU process on the host resulting in a denial of service or potential code execution with the privileges of the QEMU process.


Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service (segmentation fault) via a long /goform/langSwitch langSelectionOnly parameter.


GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.


IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file related to a \Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x0000000000000981.


An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1 allows attackers to cause denial of service or possibly other undisclosed impacts.


Use-after-Free vulnerability in cflow 1.6 in the void call(char *name int line) function at src/parser.c which could cause a denial of service via the pointer variable caller->callee.


There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a constructed program to cause a computer crash (BSOD)


An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service via the interval field to the CONNECT_REQ message.


There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD).


In AnyView (network police) network monitoring software 4.6.0.1 there is a local denial of service vulnerability in AnyView attackers can use a constructed program to cause a computer crash (BSOD).


There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816 attackers can use constructed programs to cause computer crashes (BSOD).


There is a local denial of service vulnerability in Wise Care 365 5.5.4 attackers can cause computer crash (BSOD).


An issue was discoverered in in abhijitnathwani image-processing v0.1.0 allows local attackers to cause a denial of service via a crafted image file.


A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114 which causes a denial of service (application crash).


AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario.


An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp leading to a denial of service (program crash) as demonstrated by mp42aac.


jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.


Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.


An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) aka CID-7be74942f184.


OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.


socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.


An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.


An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).


** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1 when NDEBUG is omitted allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing resulting in denial of service.


Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.


GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.


IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port.


A

double-free

vulnerability

in

in

virglrenderer

through

allows

attackers

to

cause

a

denial

of

service

by

triggering

texture

allocation

failure

because

vrend_renderer_resource_allocated_texture

is

not

an

appropriate

place

for

a

free.


A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device preventing subsequent print jobs until the printer is rebooted.


Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access.


The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries which allows a remote attacker to cause a denial of service.


Node.js versions before 10.23.1 12.20.1 14.15.4 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.


A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device causing an error to be displayed and preventing printer from functioning until the printer is rebooted.


A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.


The Kubernetes API server component in versions prior to 1.15.9 1.16.0-1.16.6 and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.


Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password.


Invalid pointer for some Intel(R) Server Boards Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable denial of service via local access.


Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063.


Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access.


Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of small packets.


fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket if the socket is being moved to a new parent directory and its old parent directory is being removed.


ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.


In ISC BIND9 versions BIND 9.11.14 -> 9.11.19 BIND 9.14.9 -> 9.14.12 BIND 9.16.0 -> 9.16.3 BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk (\*\) character this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.


An issue was discovered in Squid before 4.10. Due to incorrect input validation the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On systems with memory access protections this can result in the helper process being terminated unexpectedly. This leads to the Squid process also terminating and a denial of service for all clients using the proxy.


Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35 Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15 Citrix ADC 12.1-FIPS before 12.1-55.187 Citrix ADC and NetScaler Gateway 12.0 Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12 Citrix SD-WAN WANOP 11.2 before 11.2.1a Citrix SD-WAN WANOP 11.1 before 11.1.2a Citrix SD-WAN WANOP 11.0 before 11.0.3f Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the management network.


A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1 < 14.15.1 and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1 14.15.1 and 12.19.1.


The Kubelet component in versions 1.15.0-1.15.9 1.16.0-1.16.6 and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API including the unauthenticated HTTP read-only API typically served on port 10255 and the authenticated HTTPS API typically served on port 10250.


Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.


There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.


An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0 allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.


An issue was discovered in GPAC before 0.8.0 as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.


An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service via a hidden reboot command to '/media/?action=cmd'.


An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0 allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.


Floating point exception in function Fraction in libheif 1.4.0 allows attackers to cause a Denial of Service or possibly other unspecified impacts.


Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \zzip_file_read\ in the function \unzzip_cat_file\.


Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files and a flood of notifications to listmasters) via a series of requests with malformed parameters.


meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers to achieve code execution or denial of service by creating a gaming server with a crafted map and inviting a victim to this server. A GetValue call is mishandled.


TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.


CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.


Hirschmann OS2 RSP and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on a second device the ring is broken into two parts (thus disrupting communication between devices in the different parts).


WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message an attacker may exploit this vulnerability to cause specific function to become abnormal.


Z-Wave devices based on Silicon Labs 100 200 and 300 series chipsets do not support encryption allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot directly address this vulnerability as it is an issue with the Z-Wave specification for these legacy chipsets. One way to protect against this vulnerability is to use 500 or 700 series chipsets that support Security 2 (S2) encryption. As examples the Linear WADWAZ-1 version 3.43 and WAPIRZ-1 version 3.43 (with 300 series chipsets) are vulnerable.


HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limit the depth of recursion an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service condition.


An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website this vulnerability can be exploited.


An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted therefore consuming the maximum amount of resources (triggering a denial of service condition).


Huawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of service vulnerability. Certain service in the system does not sufficiently validate certain parameter which is received the attacker should trick the user into installing a malicious application successful exploit could cause a denial of service condition.


There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service.


HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A module does not deal with mal-crafted messages and it leads to memory leak. Attackers can exploit this vulnerability to make the device denial of service.Affected product versions include: HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11).


HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8) have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing and executing a malicious application successful exploit could cause a denial of service condition of PHONE function.


An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the implementation doesn't limit the parsing of nested JSON structures. If a victim visits an attacker-controlled website this vulnerability can be exploited via WebSocket data with a deeply nested JSON array.


HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5) Versions earlier than 10.1.0.123(C432E22R2P5) Versions earlier than 10.1.0.126(C10E7R5P1) Versions earlier than 10.1.0.126(C185E4R7P1) Versions earlier than 10.1.0.126(C461E7R3P1) Versions earlier than 10.1.0.126(C605E19R1P3) Versions earlier than 10.1.0.126(C636E7R3P4) Versions earlier than 10.1.0.128(C635E3R2P4) Versions earlier than 10.1.0.160(C00E160R2P11) Versions earlier than 10.1.0.160(C01E160R2P11) have a denial of service vulnerability. In specific scenario due to the improper resource management and memory leak of some feature the attacker could exploit this vulnerability to cause the device reset.


Z-Wave devices based on Silicon Labs 500 series chipsets using S2 including but likely not limited to the ZooZ ZST10 version 6.04 ZooZ ZEN20 version 5.03 ZooZ ZEN25 version 5.03 Aeon Labs ZW090-A version 3.95 and Fibaro FGWPB-111 version 4.3 are susceptible to denial of service and resource exhaustion via malformed SECURITY NONCE GET SECURITY NONCE GET 2 NO OPERATION or NIF REQUEST messages.


There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers can exploit this vulnerability by sending malicious packet. This can lead to denial of service.


Z-Wave devices using Silicon Labs 500 and 700 series chipsets including but not likely limited to the SiLabs UZB-7 version 7.00 ZooZ ZST10 version 6.04 Aeon Labs ZW090-A version 3.95 and Samsung STH-ETH-200 version 6.04 are susceptible to denial of service via malformed routing messages.


A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack.


There is a denial of service vulnerability in some huawei products. In specific scenarios due to the improper handling of the packets an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module NIP6300 NIP6600 NIP6800 Secospace USG6300 Secospace USG6500 Secospace USG6600 and SG9500.


E6878-370 versions 10.0.3.1(H557SP27C233) 10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233) 10.0.3.1(H563SP11C233) have a denial of service vulnerability. The system does not properly check some events an attacker could launch the events continually successful exploit could cause reboot of the process.


Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account the attacker sends a specific log query command which may cause the device to go down.


Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.


Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.


An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1 allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero.


Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.


Ethereum

latest

version

is

affected

by

a

denial

of

service

vulnerability

in

the

affected

payout

function.

Once

the

length

of

this

array

is

too

long

it

will

result

in

an

exception.

Attackers

can

make

attacks

by

creating

a

series

of

account

addresses.


Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.


The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack


Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via local access.


BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the lighttpd component.


picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3.


Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply() livelocking in peer_digest.cc mishandles EOF.


There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.


An issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati_2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could use this flaw to crash the QEMU process on the host resulting in a denial of service.


An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature.


An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The function does not validate the embedded length field of a message received from the device. This could lead to an oversized memcpy() call that will crash the running process. This could be used by an attacker to cause a denial of service.


Pexip Infinity before 24.1 has Improper Input Validation leading to temporary denial of service via SIP.


There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.


The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.


An issue has been found in PowerDNS Recursor before 4.1.18 4.2.x before 4.2.5 and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state instead of their actual DNSSEC Secure state via a DNS ANY query. This results in a denial of service for installation that always validate (dnssec=validate) and for clients requesting validation when on-demand validation is enabled (dnssec=process).


A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that when processed by the VNC server would lead to a floating point exception resulting in a denial of service.


A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device resulting in a denial of service. The highest threat from this vulnerability is to system availability.


JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.


A double free memory issue was found to occur in the libvirt API in versions before 6.8.0 responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon resulting in a denial of service or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.


A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.


A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final where host-controller tries to reconnect in a loop generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue leading to a denial of service. The highest threat from this vulnerability is to system availability.