Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.


setrlimit in HP-UX 10.01 10.10 10.24 10.20 11.00 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped which could allow local users to cause a denial of service by exhausting available disk space.


Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.


The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function which allows local users to cause a denial of service and trigger a null dereference.


The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.


The \mxcsr P4\ vulnerability in the Linux kernel before 2.2.17-14 when running on certain Intel CPUs allows local users to cause a denial of service (system halt).


Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.


Cyrus 2.0.15 2.0.16 and 1.6.24 on BSDi 4.2 with IMAP enabled allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.


Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.


IPRoute 0.973 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header.


Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions.


The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting which prevents users from making license requests.


WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.


Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.


Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table which causes miniSQL to crash when the table is queried.


Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash).


D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments.


PowerNet IX allows remote attackers to cause a denial of service via a port scan.


Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.


Bugzilla before 2.14 does not restrict access to sanitycheck.cgi which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.


The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null which allows remote attackers to cause a denial of service.


IBM AIX 430 does not properly unlock IPPMTU_LOCK which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.


Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.


Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.


Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service which causes the router to become unresponsive and stop forwarding packets.


Opera 5.0 for Linux does not properly handle malformed HTTP headers which allows remote attackers to cause a denial of service possibly with a header whose value is the same as a MIME header name.


The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses as demonstrated by ARPNuke.


Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers which could cause other processes to terminate due to an exception and allow hijacking of resources such as named pipes.


Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.


Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record which causes the cluster to enter a \split-brain\ state.


Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).


ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) message. NOTE: multiple replies to the original post state that the problem could not be reproduced.


PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.


IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790 or (2) db2jds.exe on port 6789.


The glob functionality in ProFTPD 1.2.1 and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters as demonstrated using an ls command with multiple (1) \*/..\ (2) \*/.*\ or (3) \.*./*?/\ sequences in the argument.


Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.


SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.


Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters.


Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as \/.#./\.


RunAs (runas.exe) in Windows 2000 only creates one session instance at a time which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability.


Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field as demonstrated by the PROTOS LDAPv3 test suite.


Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing possibly related to an exception handling error in csrss.exe.


Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request which prevents IIS from timing out the connection.


Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.


Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3 when the Print Spooler is not running allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.


Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to cause a denial of service (crash) via the JavaScript settimeout function. NOTE: the vendor could not reproduce the problem.


Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.


Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters which causes certain functions to dereference a null pointer.


Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data such as that produced by the Code Red worm.


NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command.


Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.


create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions which could allow a local user to delete key files and cause a denial of service.


TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a \../../*\ argument to (1) STOR or (2) RETR.


iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools or cause a denial of service via a URL-encoded Host: header in the HTTP request which reveals memory in the Location: header that is returned by the server.


Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets which cause it to enter ROMMON mode and stop forwarding packets.


Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet which causes Reliant to drop all connections to the source address of the packet.


GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.


procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file which causes the kernel to hang.


Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the \swait\ state is used by a server.


Windows 2000 domain controller in Windows 2000 Server Advanced Server or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.


Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.


Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.


IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.


Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.


Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514.


Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out causing a denial of service by creating a large number of idle sessions.


Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.


slapd in OpenLDAP 1.x before 1.2.12 and 2.x before 2.0.8 allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.


Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.


Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.


Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.


The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing \ICMP Fragmentation needed but Don't Fragment (DF) set\ packets between two target hosts which could cause one host to lower its MTU when transmitting to the other host.


Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347 which triggers an error that is not properly handled.


Cisco IOS 12.1(2)T 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999 5100-5999 7100-7999 and 10100-10999.


Sun Chili!Soft ASP has weak permissions on various configuration files which allows a local attacker to gain additional privileges and create a denial of service.


FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.


apmscript in Apmd in Red Hat 7.2 \Enigma\ allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file which could be used to cause a denial of service e.g. by creating /etc/nologin and disabling logins.


VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command.


Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port.


Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan which causes the server to consume CPU while preparing alerts.


Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070 sending some data and closing the connection.


The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request.


THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.


ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting.


IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes.


The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests.


Vulnerability in Postfix SMTP server before 20010228-pl07 when configured to email the postmaster when SMTP errors cause the session to terminate allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors which forces the SMTP session log to grow too large.


Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address which causes a crash.


SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections.


Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections aka the \Severed Windows Media Server Connection\ vulnerability.


Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option.


The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service.


3COM OfficeConnect 812 and 840 ADSL Router 4.2 running OCR812 router software 1.1.9 and earlier allows remote attackers to cause a denial of service via a long string containing a large number of \%s\ strings possibly triggering a format string vulnerability.


Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets which allows remote attackers to cause a denial of service aka the \Invalid RDP Data\ vulnerability.


Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port aka a variant of the \NetMeeting Desktop Sharing\ vulnerability.


Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of a specific length.


Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.


Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.


Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than \public\ or (2) an unknown OID which causes the WAP to deny subsequent SNMP requests.


Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets.


Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory.


Memory leak in Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5K of data to TCP port 5238.


APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card.


Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router which eventually causes the router to overwrite the MAC address in its ARP table.


The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request.


iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many \/../\ (dot dot) sequences.


Vulnerability in Support Tools Manager (xstm cstm stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.


eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet which causes Iris to crash when a user views the packet.


Citrix MetaFrame 1.8 Server with Service Pack 3 and XP Server Service Pack 1 and earlier allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server.


Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port which causes a network storm and a denial of service.


The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.


TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on.


sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.


Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.


Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a \bad request\ error.


IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.


Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.


Orange Web Server 2.1 based on GoAhead allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.


man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).


time server daemon timed allows remote attackers to cause a denial of service via malformed packets.


Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data which causes the process to hang.


Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of \PASV\ requests.


Arrowpoint (aka Cisco Content Services or CSS) allows local users to cause a denial of service via a long argument to the \show script \ \clear script \ \show archive \ \clear archive \ \show log \ or \clear log\ commands.


Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands and possibly SIZE commands if the server has been improperly installed.


Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.


IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.


Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers such as (1) Accept (2) Accept-Charset (3) Accept-Encoding (4) Accept-Language and (5) Content-Type.


Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests.


RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.


Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a large number of sub-folders.


Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000.


Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.


Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data.


AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.


Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters.


Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed which causes the server to continuously send pings (echo requests) to the network.


Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638.


MSHTML.DLL HTML parser in Internet Explorer 4.0 and other versions allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object.


NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.


GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server which causes it to crash.


Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel possibly related to poor error checking during ELF loading.


FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form aka the \Malformed Web Form Submission\ vulnerability.


Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387.


Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.


FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded.


Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled.


McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045.


IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.


Sendmail before 8.12.1 without the RestrictQueueRun option enabled allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h) which causes Sendmail to drop queue entries (2) via the -qR option or (3) via the -qS option.


Cisco Catalyst 6000 5000 or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client which generates a protocol mismatch error.


Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters.


The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a space character.


WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone.


Websweeper 4.0 does not limit the length of certain HTTP headers which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header.


Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command which causes the listener to hang.


FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface which floods the console with warning messages and consumes CPU resources.


Denicomp REXECD 1.05 and earlier allows a remote attacker to cause a denial of service (crash) via a long string.


Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.


Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long string to the server port (2407) which causes the server to crash.


Universal Plug and Play (UPnP) in Windows 98 98SE ME and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.


Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet aka the \Malformed PPTP Packet Stream\ vulnerability.


rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option.


NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine exhausting the mbuf pool.


AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.


Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets which prevents the host from establishing any additional UDP connections and possibly causes a crash.


Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.


Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string.


The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large number of connections that send null characters.


SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier as used in Netgear ME102 and Linksys WAP11 accepts arbitrary community strings with requested MIB modifications which allows remote attackers to obtain sensitive information such as WEP keys cause a denial of service or gain access to the network.


Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.


Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.


Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.


Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service or (2) the telnet service which do not properly disconnect the user after several failed login attempts.


Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long invalid WebDAV request.


WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive (A:\\).


Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.


BinTec X4000 Access router and possibly other versions allows remote attackers to cause a denial of service via a SYN port scan which causes the router to hang.


IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g. using a port scan) that does not send additional data which causes a failure in snmpd.


Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148.


Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set.


Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.


rwho daemon rwhod in FreeBSD 4.2 and earlier and possibly other operating systems allows remote attackers to cause a denial of service via malformed packets with a short length.


Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD (\CD . .\) command.


Universal Plug and Play (UPnP) on Windows 98 98SE ME and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g. chargen) or (2) via a spoofed SSDP announcement to broadcast or multicast addresses which could cause all UPnP clients to send traffic to a single target system.


SGI IRIX 6.5 through 6.5.12f and possibly earlier versions and FreeBSD 3.0 allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay.


Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.


WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.


Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.


Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension.


Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages.


CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets.


Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier (2) Microsoft SQL Server 2000 and earlier (3) Windows NT 4.0 and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.


Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.


The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions which allows local users to modify the permissions to \No Access\ and disable Winsock network connectivity to cause a denial of service aka the \Winsock Mutex\ vulnerability.


Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan e.g. with nmap -PO.


The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.


htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.


Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.


Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.


ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002.


LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.


Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests.


Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination which consumes the license limits.


Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service by sending seven or more characters to TCP port 5239.


ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23.


Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.


Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g. from a port scanner) which prevents others from logging into the device.


TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.


Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10 000) of malformed ICMP or TCP packets.


Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return <CR> that is not followed by a line feed <LF>.


Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string.


The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit traffic aka Bug ID CSCtt45381.


The Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote attackers to cause a denial of service (process crash) via an attempted SSH session aka Bug ID CSCtt94543.


EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006.


The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.


readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.


Cisco IOS before 15.1(1)SY on ASR 1000 devices when Multicast Listener Discovery (MLD) tracking is enabled for IPv6 allows remote attackers to cause a denial of service (device reload) via crafted MLD packets aka Bug ID CSCtz28544.


The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt.


The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets aka Bug ID CSCts46521.


The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.


The MallocLite implementation in Cisco IOS 12.0 12.2 15.0 15.1 and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCAL_PREF) attribute length aka Bug ID CSCtq06538.


Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.


mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions


The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file as demonstrated by a FIFO.


Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port aka Bug ID CSCtx38369.


The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7 6.x before 6.0.10 and 7.x before 7.0.0-beta2 does not properly clean up CertFP entries when a user is deleted which allows remote attackers to access a different user account or cause a denial of service (daemon crash) via a login as a deleted user.


Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly aka Bug ID CSCts88664.


Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function (2) YAML node to the load_node function (3) YAML mapping to the load_mapping function or (4) YAML sequence to the load_sequence function.


The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S when a VRF interface is configured allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets aka Bug ID CSCts80643.


EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data to TCP port (1) 5050 or (2) 24004.


The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service (web-server outage or daemon crash or hang) via a flood of packets that triggers automated blocking of network traffic.


The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size related to the pcap and pcap-ng file parsers.


NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.


Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets aka Bug ID CSCtc12426.


Microsoft Office SharePoint Server 2007 SP2 and SP3 SharePoint Server 2010 Gold and SP1 and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL aka \SharePoint Search Scope Vulnerability.\


OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.


CA ARCserve Backup r12.0 through SP2 r12.5 before SP2 r15 through SP1 and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network request.


Cisco IOS 15.1 and 15.2 when a clientless SSL VPN is configured allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page as demonstrated by the Android browser aka Bug ID CSCtr86328.


VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors.


The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file which triggers a divide-by-zero error.


PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1 10.3.1 11.3 and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) TCP or (2) UDP packet to port 111.


The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a high rate aka Bug ID CSCts37717.


The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via a crafted FCIP header aka Bug ID CSCtn93151.


Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13 and Puppet Enterprise (PE) Users 1.0 1.1 1.2.x 2.0.x and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use \a marshaled form of a Puppet::FileBucket::File object\ to write to arbitrary file locations.


Python before 2.6.8 2.7.x before 2.7.3 3.x before 3.1.5 and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.


Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.


slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true which causes empty attributes to be returned.


dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3 12.4 15.0 and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S aka Bug ID CSCtt94391.


The Bitcoin protocol as used in bitcoind before 0.4.4 wxBitcoin Bitcoin-Qt and other programs does not properly handle multiple transactions with the same identifier which allows remote attackers to cause a denial of service (unspendable transaction) by leveraging the ability to create a duplicate coinbase transaction.


AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.


ISC BIND 9.x before 9.7.6-P1 9.8.x before 9.8.3-P1 9.9.x before 9.9.1-P1 and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.


eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000.


The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.


The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) via crafted transit traffic aka Bug IDs CSCtq64987 and CSCtu57226.


epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.


spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.


OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.


The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle RAP responses which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets aka \Remote Administration Protocol Denial of Service Vulnerability.\


fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.


Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.module) in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service (CPU consumption) via a long email address.


Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.


The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.


Adobe ColdFusion 8.0 8.0.1 9.0 and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4 15.0 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed transit H.323 traffic aka Bug ID CSCtq45553.


MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.


VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.


The XML feature in IBM DB2 9.5 before FP9 9.7 through FP5 and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.


InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1 8.5 before FP3 and 8.7 does not properly restrict use of the troubleshooting feature which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (workbench outage) via unspecified vectors.


The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM) which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages as demonstrated by a Plantronics headset aka Bug ID CSCti40315.


The kernel in IBM AIX 5.3 6.1 and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 does not properly implement the dupmsg system call which allows local users to cause a denial of service (system crash) via a crafted application.


The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.0 through 8.2 before 8.2(5.20) 8.3 before 8.3(2.29) 8.4 before 8.4(3) 8.5 before 8.5(1.6) and 8.6 before 8.6(1.1) allows remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger a shun event aka Bug ID CSCtw35765.


The awhost32 service in Symantec pcAnywhere through 12.5.3 Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x) Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x) and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.


dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.


wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.


Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0 7.1 before 7.1.91.0 and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of IPv6 packets aka Bug ID CSCtt07949.


Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service which triggers hash table collisions.


libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.


The TCP implementation in IBM AIX 5.3 6.1 and 7.1 when the Large Send Offload option is enabled allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.


The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.


SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8 2.7.x before 2.7.3 3.x before 3.1.5 and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.


Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file (2) I4B trace file or (3) NETMON 2 capture file.


The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S 3.5.xS before 3.5.1S and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6 aka Bug ID CSCts38429.


Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.


The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x 5.x 6.0 and 7.0 before 7.0.220.0 7.1 before 7.1.91.0 and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request aka Bug ID CSCts81997.


The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or hang) via malformed network traffic aka Bug ID CSCto71445.


The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function as demonstrated by a crash of the Apache HTTP Server.


Cisco Wireless LAN Controller (WLC) devices with software 4.x 5.x 6.0 and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0 when WebAuth is enabled allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets aka Bug ID CSCtt47435.


tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.


Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.


The Smart Install feature in Cisco IOS 12.2 15.0 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) by sending a malformed Smart Install message over TCP aka Bug ID CSCtt16051.


Microsoft .NET Framework 4 does not properly compare index values which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application aka \.NET Framework Index Comparison Vulnerability.\


The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function which allows remote attackers to cause a denial of service (service outage) via a crafted packet.


SystemTap 1.7 1.6.7 and probably other versions when unprivileged mode is enabled allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data which triggers a read of an invalid pointer.


scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment leading to an invalid call to the free function.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count aka Bug ID CSCtv19854.


The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.


Xen 3.4 4.0 and 4.1 when the guest OS has not registered a handler for a syscall or sysenter instruction does not properly clear a flag for exception injection when injecting a General Protection Fault which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen.


** DISPUTED ** GLib 2.31.8 and earlier when the g_str_hash function is used computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) allow remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger syslog message 305006 aka Bug ID CSCts39634.


Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier 6 Update 30 and earlier and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality integrity and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object type which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571 but that identifier was already assigned to a different issue.


The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21 when a threaded MPM is used does not properly handle a %{}C format string which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.


Memory leak in the NAT feature in Cisco IOS 12.4 15.0 and 15.1 allows remote attackers to cause a denial of service (memory consumption and device hang or reload) via SIP packets that require translation related to a \memory starvation vulnerability \ aka Bug ID CSCti35326.


Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43 6.1 before 6.1.0.43 7.0 before 7.0.0.23 and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2 R2 and R2 SP1 does not properly handle objects in memory during record lookup which allows remote attackers to cause a denial of service (daemon restart) via a crafted query aka \DNS Denial of Service Vulnerability.\


Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4 15.0 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic aka Bug ID CSCtq36153.


OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.


The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service (crash) via a crafted DCC RESUME request.


PyXML: Hash table collisions CPU usage Denial of Service


The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core dump) via vectors involving SIP messages that arrive after an upgrade aka Bug ID CSCtj87367.


The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).


The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application as demonstrated by an NASM file.


common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service (packet loop) via a crafted UDP DNS response.


The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.


The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 8.0 before 8.0(5.25) 8.1 before 8.1(2.50) 8.2 before 8.2(5.5) 8.3 before 8.3(2.22) 8.4 before 8.4(2.1) and 8.5 before 8.5(1.2) does not properly handle flows which allows remote attackers to cause a denial of service (device reload) via a crafted series of (1) IPv4 or (2) IPv6 UDP packets aka Bug ID CSCtq10441.


The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.


The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file as demonstrated by an airopeek file.


Symantec pcAnywhere through 12.5.3 Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x) Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x) and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client (2) malformed data from a server or (3) an invalid response.


The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell capture file containing a record that is too small.


tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003.


The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.


IBM DB2 9.1 before FP11 9.5 before FP9 9.7 before FP5 and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request.


** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time.


Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8 5.0.x before 5.0.5 and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet aka Bug IDs CSCti23447 CSCti49507 and CSCtj01991.


The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices with software 7.0 through 7.2 before 7.2(5.7) 8.0 before 8.0(5.27) 8.1 before 8.1(2.53) 8.2 before 8.2(5.8) 8.3 before 8.3(2.25) 8.4 before 8.4(2.5) and 8.5 before 8.5(1.2) and the Firewall Services Module (FWSM) 3.1 and 3.2 before 3.2(23) and 4.0 and 4.1 before 4.1(8) in Cisco Catalyst 6500 series devices when multicast routing is enabled allow remote attackers to cause a denial of service (device reload) via a crafted IPv4 PIM message aka Bug IDs CSCtr47517 and CSCtu97367.


Cisco Unity Connection before 7.1.5b(Su5) 8.0 and 8.5 before 8.5.1(Su3) and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments aka Bug ID CSCtq67899.


AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.


Apache Tomcat 5.5.x before 5.5.35 6.x before 6.0.34 and 7.x before 7.0.23 uses an inefficient approach for handling parameters which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values a different vulnerability than CVE-2011-4858.


The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet aka Bug ID CSCtr28857.


The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.


OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.


The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets aka \Terminal Server Denial of Service Vulnerability.\


The SSHv2 implementation in Cisco IOS 12.2 12.4 15.0 15.1 and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt aka Bug ID CSCtr49064.


OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download aka a \slow read\ attack.


The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.


The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4 as used in Firefox 4.x through 12.0 Firefox ESR 10.x before 10.0.5 Thunderbird 5.0 through 12.0 Thunderbird ESR 10.x before 10.0.5 and SeaMonkey before 2.10 allows remote attackers to cause a denial of service (application crash) via a zero-length item as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.


DirectWrite in Microsoft Windows Vista SP2 Windows Server 2008 SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly render Unicode characters which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site aka \DirectWrite Application Denial of Service Vulnerability.\


The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.


The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (pvcontrol.exe process hang) via \\n (line feed) characters in the Id fields of many \batch begin untethered\ commands.


IBM Global Security Kit (aka GSKit) as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45 7.0.x before 7.0.0.25 8.0.x before 8.0.0.4 and 8.5.x before 8.5.0.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.


The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012 when Internet Explorer is used allow remote attackers to cause a denial of service (application crash) via a long URI.


chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 when a certain mohinterpret setting is enabled allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold.


Unspecified vulnerability in autofs as used in Red Hat Enterprise Linux (RHEL) 5 allows local users to cause a denial of service (autofs crash and delayed mounts) or prevent \mount expiration\ via unspecified vectors related to \using an LDAP-based automount map.\


Google Chrome before 22.0.1229.79 does not properly handle plug-ins which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via unknown vectors.


The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.


in

the

HTTP

NIO

connector

in

Apache

Tomcat

before

and

before

does

not

properly

restrict

the

request-header

size

which

allows

remote

attackers

to

cause

a

denial

of

service

(memory

consumption)

via

a

large

amount

of

header

data.


MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.


libxslt 1.1.26 and earlier as used in Google Chrome before 21.0.1180.89 does not properly manage memory which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.


Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value.


Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.


The (1) server and (2) agent components in CA ARCserve Backup r12.5 r15 and r16 on Windows do not properly validate RPC requests which allows remote attackers to cause a denial of service (service crash) via a crafted request.


The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.


Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4 when SIP inspection is enabled create many identical pre-allocated secondary pinholes which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic aka Bug ID CSCtz63143.


master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by establishing and closing a port-705 TCP connection a different vulnerability than CVE-2012-1923.


The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe 4.2.x and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.


Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.


The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.


The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.


sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3 when configured as a CGI script (aka php-cgi) does not properly handle query strings that lack an = (equals sign) character which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.


Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.


The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.


Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.


Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document.


crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.


The image-codec implementation in the PDF functionality in Google Chrome before 20.0.1132.43 does not initialize an unspecified pointer which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9 7.1 and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel.


Xen 4.0 and 4.1 when running a 64-bit PV guest on \older\ AMD CPUs does not properly protect against a certain AMD processor bug which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary a different vulnerability than CVE-2012-0217.


Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.


Cumin (aka MRG Management Console) as used in Red Hat Enterprise MRG 2.5 allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link.


The Gliffy plugin before 3.7.1 for Atlassian JIRA and before 4.2 for Atlassian Confluence does not properly restrict the capabilities of third-party XML parsers which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.


fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients as demonstrated by vsftpd.


Apache Qpid 0.17 and earlier does not properly restrict incoming client connections which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.


Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012 when Internet Explorer is used allows remote attackers to cause a denial of service (memory consumption) via a URI with multiple references to the same name-value pair.


IBM Global Security Kit (aka GSKit) before 8.0.14.22 as used in IBM Rational Directory Server IBM Tivoli Directory Server and other products does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer a different vulnerability than CVE-2012-2333.


Use-after-free vulnerability in the Linux kernel before 3.3.6 when huge pages are enabled allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem as demonstrated by a umount operation that triggers improper handling of quota data.


Google Chrome before 21.0.1180.89 does not properly load URLs which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a \stale buffer.\


MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.


The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.


proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests.


libxml2 2.9.0-rc1 and earlier as used in Google Chrome before 21.0.1180.89 does not properly support a cast of an unspecified variable during handling of XSL transforms which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document related to the _xmlNs data structure in include/libxml/tree.h.


The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.


The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN packets as demonstrated by hping a related issue to CVE-1999-0116.


ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.


The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.


The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.


epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.


Google Chrome before 20.0.1132.43 does not properly set array values which allows remote attackers to cause a denial of service (incorrect pointer use) or possibly have unspecified other impact via unknown vectors.


The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page as demonstrated by certain WebGL performance tests aka rdar problem 11520387.


The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame does not properly handle object linkage which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted document.


Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.


Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a renegotiation attempt that occurs after the initiation of the V3 link protocol.


The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.


munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.


The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.


FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server.


Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet aka Bug IDs CSCty94537 and CSCtz62593.


The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2 on the x86 platform and unspecified other platforms allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.


Atlassian JIRA before 5.0.1; Confluence before 3.5.16 4.0 before 4.0.7 and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8 2.6 before 2.6.8 and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9 2.1 before 2.1.2 2.2 before 2.2.9 2.3 before 2.3.7 and 2.4 before 2.4.1 do not properly restrict the capabilities of third-party XML parsers which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.


The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.


The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address as demonstrated by rds-ping.


MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG (2) WMF (3) PSD (4) TGA (5) TTF (6) BMP (7) TIFF or (8) PCX file.


Cisco NX-OS 4.2 5.0 5.1 and 5.2 on Nexus 7000 series switches when the High Availability (HA) policy is configured for Reset allows remote attackers to cause a denial of service (device reset) via a malformed Cisco Discovery Protocol (CDP) packet aka Bug IDs CSCtk34535 and CSCtk19132.


The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.


master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted Open-PDU request that triggers incorrect DisplayString processing a different vulnerability than CVE-2012-1923.


Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes which allows remote attackers to cause a denial of service (cross-process interference) via unspecified vectors.


The socketpair function in IBM AIX 5.3 6.1 and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.


ConnMan before 0.85 does not ensure that netlink messages originate from the kernel which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.


chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 when the trustrpid option is enabled allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel.


Openstack Compute (Nova) Folsom 2012.1 and 2011.3 does not limit the number of security group rules which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.


PostgreSQL 8.3.x before 8.3.19 8.4.x before 8.4.12 9.0.x before 9.0.8 and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.


Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by using the clientless WebVPN feature aka Bug ID CSCth34278.


The TM Software Tempo plugin before 6.4.3.1 6.5.x before 6.5.0.2 and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.


The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.


Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6 0.5.x before 0.5.5 0.6.0.x before 0.6.0.7 and 0.6.x before 0.6.2 allows remote attackers to cause a denial of service (block-processing outage and incorrect block count) via unknown behavior on a Bitcoin network.


The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641 (2) 3734 or (3) 3735.


The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.


The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via TCP packets to unspecified ports.


Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame does not request user confirmation before continuing a large series of downloads which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.


The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.


Oracle Java SE before 7 Update 6 and OpenJDK 7 before 7u6 build 12 and 8 before build 39 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.


Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP (2) ASF (3) IEEE 802.11 (4) IEEE 802.3 and (5) LTP dissectors.


The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.


Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110 e-All-in-One D110 Plus e-All-in-One B210 eStation All-in-One C510 Ink Advantage e-All-in-One K510 and Premium Fax e-All-in-One C410 printers allows remote attackers to cause a denial of service via unknown vectors.


The webRequest API in Google Chrome before 21.0.1180.57 on Mac OS X and Linux and before 21.0.1180.60 on Windows and Chrome Frame does not properly interact with the Chrome Web Store which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.


Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.


internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.