Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters as demonstrated by a %gg sequence.


ISC BIND 9.8.x before 9.8.0-P1 when Response Policy Zones (RPZ) RRset replacement is enabled allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.


The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.


Memory

leak

in

org.apache.jasper.runtime.JspWriterImpl.response

in

the

JavaServer

Pages

(JSP)

component

in

IBM

WebSphere

Application

Server

(WAS)

before

allows

remote

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

accessing

a

JSP

page

of

an

application

that

is

repeatedly

stopped

and

restarted.


wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.


The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.


Xen when using x86 Intel processors and the VMX virtualization extension is enabled does not properly handle cpuid instruction emulation when exiting the VM which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.


The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1 when the LDAP back end is used allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors related to the locked_check_p function. NOTE: the Berkeley DB vector is covered by CVE-2011-4151.


Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server aka \TCP/IP QOS Denial of Service Vulnerability.\


Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.


t1lib 5.1.2 and earlier as used in Xpdf before 3.02pl6 teTeX and other products reads from invalid memory locations which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document a different vulnerability than CVE-2011-0764.


The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs aka Bug ID CSCtj22354.


Use-after-free vulnerability in WebCore in WebKit before r77705 as used in Google Chrome before 11.0.672.2 and other products allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that entice a user to resubmit a form related to improper handling of provisional items by the HistoryController component aka rdar problem 8938557.


Google Chrome before 10.0.648.204 does not properly handle base strings which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors related to a \buffer error.\


The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.


lsassd in Likewise Open /Enterprise 5.3 before build 7845 Open 6.0 before build 8325 and Enterprise 6.0 before build 178 as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.


The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.


modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.


Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.


Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0 7.0 before 7.0.98.216 and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets aka Bug ID CSCth74426.


utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.


net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34 when addip_enable and auth_enable are used does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.


The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vectors involving a new event channel port.


Google Chrome before 12.0.742.91 does not properly handle a large number of form submissions which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.


Xen possibly before 4.0.2 allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.


avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.


The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted parameters.


Use-after-free

vulnerability

in

the

FrameView::calculateScrollbarModesForLayout

function

in

page/FrameView.cpp

in

WebCore

in

WebKit

in

Google

Chrome

before

allows

remote

attackers

to

cause

a

denial

of

service

(application

crash)

or

possibly

have

unspecified

other

impact

via

crafted

JavaScript

code

that

calls

the

removeChild

method

during

interaction

with

a

FRAME

element.


daemon/worker.c in Unbound 1.x before 1.4.10 when debugging functionality and the interface-automatic option are enabled allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.


The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager.


net/ipv4/ip_gre.c in the Linux kernel before 2.6.34 when ip_gre is configured as a module allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.


Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server which allows remote attackers to cause a denial of service (application crash) via vectors involving long messages.


modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.


epan/dissectors/packet-ldap.c in Wireshark 1.0.x 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP filter string containing many elements.


Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument a related issue to CVE-2010-4409.


The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread.


SystemTap 1.4 and earlier when unprivileged (aka stapusr) mode is enabled allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.


acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.


rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle a block child which allows remote attackers to cause a denial of service (application crash) or possibly have unknown other impact via a crafted text element in an SVG document.


Asterisk Open Source 1.4.x before 1.4.40.1 1.6.1.x before 1.6.1.25 1.6.2.x before 1.6.2.17.3 and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections.


manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24 1.6.2.x before 1.6.2.17.2 and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.


The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.


The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4 and the Apache HTTP Server 2.2.18 allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.


common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup as demonstrated by an a< sequence.


EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site.


Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages.


Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2 Windows Server 2008 SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages aka \ICMP Denial of Service Vulnerability.\


Yamaha RTX RT SRT RTV RTW and RTA series routers with firmware 6.x through 10.x and NEC IP38X series routers with firmware 6.x through 10.x do not properly handle IP header options which allows remote attackers to cause a denial of service (device reboot) via a crafted option that triggers access to an invalid memory location.


The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response aka \DFS Referral Response Vulnerability.\


Google Chrome before 12.0.742.91 does not properly implement the framework for extensions which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.


Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 6.x before 6.1(5)su2 7.x before 7.1(5b)su2 8.0 before 8.0(3) and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message aka Bug ID CSCth39586.


** DISPUTED ** OpenSSL before 0.9.8l and 0.9.8m through 1.x does not properly restrict client-initiated renegotiation within the SSL and TLS protocols which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments not a security library to prevent or limit renegotiation when it is inappropriate within a specific environment.


Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an application involving a popup control and a custom DependencyProperty property related to lack of garbage collection.


The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \\n (newline) or (2) \\ (backslash) character in a log filename as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.


The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.


jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39 when a network device with a large number of receive queues is installed but the default tx_queues setting is used does not properly restrict queue indexes which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.


The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND.


The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.


fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.


slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections as demonstrated by using multiple processes to replay TCP sessions a different vulnerability than CVE-2011-0019.


Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.


Memory leak in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 6.x before 6.1(5)su3 7.x before 7.1(5b)su3 8.0 before 8.0(3a)su2 and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message aka Bug ID CSCti42904.


Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.


Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or (2) a TextBlock or TextBox element.


Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1 9.8.x before 9.8.0-P2 9.4-ESV before 9.4-ESV-R4-P1 and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.


IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls which allows local users to cause a denial of service (system crash) via a crafted call.


Memory

leak

in

com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl

in

the

JavaServer

Pages

(JSP)

component

in

IBM

WebSphere

Application

Server

(WAS)

before

and

before

allows

remote

attackers

to

cause

a

denial

of

service

(memory

consumption)

by

sending

many

JSP

requests

that

trigger

large

responses.


wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09 4.3 and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05 4.3.CP05 and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references a similar issue to CVE-2003-1564.


jabberd2 before 2.2.14 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.


Google Chrome before 10.0.648.204 does not properly handle SVG text which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


SystemTap 1.4 when unprivileged (aka stapusr) mode is enabled allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).


The tunnels implementation in the Linux kernel before 2.6.34 when tunnel functionality is configured as a module allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.


The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger use of a malformed \out-of-bounds structure.\


The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.


Cisco IOS 12.2 12.3 12.4 15.0 and 15.1 when the data-link switching (DLSw) feature is configured allows remote attackers to cause a denial of service (device crash) by sending a sequence of malformed packets and leveraging a \narrow timing window \ aka Bug ID CSCtf74999 a different vulnerability than CVE-2007-0199 CVE-2008-1152 and CVE-2009-0629.


The SMB server in Microsoft Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request aka \SMB Request Parsing Vulnerability.\


Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier and Fedora 14 and earlier mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory which allows local users to replace or delete arbitrary /tmp files and consequently cause a denial of service or possibly gain privileges by running a setuid application that relies on /tmp as demonstrated by the ksu application.


VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.


The context implementation in WebKit as used in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.


The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program which allows local users to obtain sensitive information or cause a denial of service via open lseek read and write system calls.


lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\\0' characters in header names which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.


Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi network that does not respond to connection attempts.


IBM Maximo Asset Management and Asset Management Essentials 6.2 7.1 and 7.5; IBM Tivoli Asset Management for IT 6.2 7.1 and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2 7.1 and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


WebKit as used in Apple Safari before 5.0.4 and iOS before 4.3 does not properly handle unspecified \cached resources \ which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.


The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (assertion failure) via crafted packets as demonstrated by fuzz-2010-12-30-28473.pcap.


The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions a different vulnerability than CVE-2010-2632.


Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S when implemented over Fast Sequence Transport (FST) allows remote attackers to cause a denial of service (memory consumption and device reload or hang) via a crafted IP protocol 91 packet aka Bug ID CSCth69364.


The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer which might allow attackers to cause a denial of service (system crash) via unspecified vectors.


Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address aka Bug ID CSCth03605.


389 Directory Server 1.2.7.5 when built with mozldap allows remote attackers to cause a denial of service (replica crash) by sending an empty modify request.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.


The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a large data size to TCP port 1530.


Google Chrome before 9.0.597.94 does not properly perform event handling for animations which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2 7.x before 7.1(5b)su3 8.x before 8.0(3a)su1 and 8.5 before 8.5(1) and Cisco IOS 12.4 and 15.1 allows remote attackers to cause a denial of service (memory consumption and process failure or device reload) via a malformed SIP message aka Bug IDs CSCti75128 and CSCtj09179.


mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application.


Cisco IOS XR 3.6.x 3.8.x before 3.8.3 and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/ which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections aka Bug ID CSCtd64417.


The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) when multiple unprivileged instances are configured use 0777 permissions for the /var/run/dirsrv directory which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory.


Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet related to lockd and the svc_xprt_received function.


Use-after-free vulnerability in Mono when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.


The server components in Objectivity/DB 10.0 do not require authentication for administrative commands which allows remote attackers to modify data obtain sensitive information or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server as demonstrated by commands that are ordinarily sent by the (a) ookillls and (b) oostopams applications. NOTE: some of these details are obtained from third party information.


The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization and send messages read messages read contact lists or cause a denial of service (login unavailability) via unspecified vectors.


The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN) which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions aka \Active Directory SPN Validation Vulnerability.\


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors related to \underflow errors.\


The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used does not properly restrict data types which allows remote attackers to modify internal read-only data structures and cause a denial of service (plugin crash) or corrupt the internal state of the security manager via a crafted media file as demonstrated by modifying a C# struct.


Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL libraries which allows remote attackers to cause a denial of service (application crash) via unknown vectors.


Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet which allows remote attackers to cause a denial of service (lockd statd mountd or portmap outage) via a crafted packet related to an \integer truncation issue.\


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12) 7.1 and 7.2 before 7.2(5.2) 8.0 before 8.0(5.21) 8.1 before 8.1(2.49) 8.2 before 8.2(3.6) and 8.3 before 8.3(2.7) and Cisco PIX Security Appliances 500 series devices when transparent firewall mode is configured but IPv6 is not configured allow remote attackers to cause a denial of service (packet buffer exhaustion and device outage) via IPv6 traffic aka Bug ID CSCtj04707.


Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.


Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers which might allow remote attackers to cause a denial of service (daemon crash) via vectors that trigger certain log messages.


Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale rendering node.\


Cisco IOS 12.4 15.0 and 15.1 allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets aka Bug ID CSCtj41194.


librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4 7.5.3.x before 7.5.3.5 and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address which allows remote attackers to (1) register or (2) unregister RPC services and consequently cause a denial of service or obtain sensitive information from interprocess communication via crafted UDP packets containing service commands.


servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption) via an XML-RPC request containing an entity declaration in conjunction with an entity reference related to an XML External Entity (aka XXE) issue.


The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9 when an LDAP backend is used allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence as demonstrated by a \\n sequence.


The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (crash) via a crafted request that is not properly handled by the KiFastCallEntry hook.


The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1 4.0-ESV and 4.1-ESV before 4.1-ESV-R1 and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.


The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x 1.1.x 1.5.x and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet aka Bug ID CSCtf97164.


The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.


ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash) and possibly obtain sensitive information in applications that use OpenSSL via a malformed ClientHello handshake message that triggers an out-of-bounds memory access aka \OCSP stapling vulnerability.\


Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x 1.1.x 1.5.x and 1.6.x allow remote attackers to cause a denial of service (process crash) via a crafted Real-Time Transport Control Protocol (RTCP) UDP packet aka Bug ID CSCth60993.


Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets aka Bug ID CSCth17178 a different vulnerability than CVE-2011-0350.


Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request related to an \ad hoc recording\ issue aka Bug ID CSCtf97205.


Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18 and in fnmatch.c in libc in NetBSD 5.1 OpenBSD 4.8 FreeBSD Apple Mac OS X 10.6 Oracle Solaris 10 and Android allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument as demonstrated by attacks against mod_autoindex in httpd.


Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b) as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1 does not properly handle dropped packets which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port aka Cisco Bug ID CSCtj17451.


Use-after-free vulnerability in Mono when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20) 8.1 before 8.1(2.48) 8.2 before 8.2(3) and 8.3 before 8.3(2.1) when the RIP protocol and the Cisco Phone Proxy functionality are configured allow remote attackers to cause a denial of service (device reload) via a RIP update aka Bug ID CSCtg66583.


Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/ which might allow remote attackers to cause a denial of service (inode consumption) by establishing many sessions.


Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size as demonstrated by the cached-descriptors.new file.


Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension which allows remote attackers to cause a denial of service (application crash) via a crafted extension.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.


Unspecified vulnerability in the BlackBerry Administration API in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 5.0.1 through 5.0.3 and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3 allows remote attackers to read text files or cause a denial of service via unknown vectors.


The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xSG allows remote attackers to cause a denial of service (device reload or hang) via malformed NetMeeting Directory (aka Internet Locator Service or ILS) LDAP traffic aka Bug ID CSCtd10712.


lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (crash) via a crafted 0x80000064 IOCTL request that triggers an assertion failure. NOTE: some of these details are obtained from third party information.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.


ISC BIND 9.7.1 through 9.7.2-P3 when configured as an authoritative server allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.


Google Chrome before 9.0.597.94 does not properly handle anonymous blocks which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.


slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data which allows remote attackers to cause a denial of service via a large compression factor.


Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a long line in a MIDI (.mid) file.


Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets aka Bug ID CSCth41891 a different vulnerability than CVE-2011-0349.


Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x 1.1.x 1.5.x and 1.6.x do not properly restrict remote access to the Java servlet RMI interface which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests aka Bug IDs CSCtg35830 and CSCtg35825.


The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3 2.32.x before 2.32.2 3.0.x before 3.0.2 and 3.1.x before 3.1.1 when raw encoding is used allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.


Opera before 11.01 does not properly implement Wireless Application Protocol (WAP) dropdown lists which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted WAP document.


The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x 1.1.x 1.5.x 1.6.x and 1.7.0 allows remote attackers to cause a denial of service (process crash) via a crafted request aka Bug ID CSCtj44534.


The glob implementation in Pure-FTPd before 1.0.32 and in libc in NetBSD 5.1 does not properly expand expressions containing curly brackets which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11) 7.1 and 7.2 before 7.2(5.1) 8.0 before 8.0(5.19) 8.1 before 8.1(2.47) 8.2 before 8.2(2.19) and 8.3 before 8.3(1.8); Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(20) 3.2 before 3.2(20) 4.0 before 4.0(15) and 4.1 before 4.1(5) allow remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message aka Bug IDs CSCtg69457 and CSCtl84952.


Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors related to malformed router caches and improper handling of integer values.


The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14 1.4.12 1.4.7 and possibly other versions does not properly handle errors which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third party information.


The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.


The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable which allows remote attackers to cause a denial of service (application crash) via a malformed packet.


The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service (CPU consumption) via an unspecified closing sequence aka Bug ID CSCtt32565.


JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.


OpenSSL before 0.9.8s and 1.x before 1.0.0f when RFC 3779 support is enabled allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.


The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data which allows remote attackers to cause a denial of service (application crash) via a crafted message a different vulnerability than CVE-2011-3594.


Multiple integer signedness errors in the (1) process_bin_sasl_auth (2) process_bin_complete_sasl_auth (3) process_bin_update and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.


Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.


include/iniset.php in Roundcube Webmail 0.5.4 and earlier when PHP 5.3.7 or 5.3.8 is used allows remote attackers to trigger a GET request for an arbitrary URL and cause a denial of service (resource consumption and inbox outage) via a Subject header containing only a URL a related issue to CVE-2011-3379.


HmiLoad in the runtime loader in Siemens WinCC flexible 2004 2005 2007 and 2008; WinCC V11 (aka TIA portal); the TP OP MP Comfort Panels and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime when Transfer Mode is enabled allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP.


The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.


Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.


Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or (2) WRQ operation.


The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2 when Point-to-Point Termination and Aggregation (PTA) and L2TP are used allows remote attackers to cause a denial of service (device crash) via crafted network traffic aka Bug ID CSCtf71673.


Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function.


Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests aka Bug ID CSCtr65682.


Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.


Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web page as demonstrated by forbes.com.


The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory.


message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshing.


The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle exhaustion and mainApp hang) by making authentication attempts that exceed the configured limit aka Bug ID CSCto51204.


dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.


The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.


Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the \set mpls experimental imposition\ command which allows remote attackers to cause a denial of service (device crash) via network traffic that triggers (1) fragmentation or (2) reassembly aka Bug ID CSCtr56576.


The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.


The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas which allows remote attackers to cause a denial of service (application crash) via a crafted message.


The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls.


Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page as demonstrated by a page under the cisco.com home page.


Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465 aka Bug ID CSCts48300.


The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.


Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.


JBoss Web as used in Red Hat JBoss Communications Platform before 5.1.3 Enterprise Web Platform before 5.1.2 Enterprise Application Platform before 5.1.2 and other products allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a \surrogate pair character\ that is \at the boundary of an internal buffer.\


One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts which allows remote authenticated users to cause a denial of service (login disruption) or spoof votes or comments by selecting a conflicting e-mail address.


Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.


Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted REST URL parameter as demonstrated by parameters to admin/ and certain other files.


The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an \invalid log first block value.\


query.c in ISC BIND 9.0.x through 9.6.x 9.4-ESV through 9.4-ESV-R5 9.6-ESV through 9.6-ESV-R5 9.7.0 through 9.7.4 9.8.0 through 9.8.1 and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries error logging and the caching of an invalid record by the resolver.


The idnsGrokReply function in Squid before 3.1.16 does not properly free memory which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.


The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39 when a certain UDP Fragmentation Offload (UFO) configuration is enabled allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.


PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


Parallels

Plesk

Small

Business

Panel

does

not

properly

validate

string

data

that

is

intended

for

storage

in

an

XML

document

which

allows

remote

attackers

to

cause

a

denial

of

service

(parsing

error)

or

possibly

have

unspecified

other

impact

via

a

crafted

cookie

as

demonstrated

by

cookies

to

and

certain

other

files.


chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request.


Memory leak in Cisco IOS 12.4 and 15.0 through 15.2 and Cisco Unified Communications Manager (CUCM) 7.x allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message aka Bug IDs CSCto93837 and CSCtj61883.


Wibu-Systems AG CodeMeter Runtime 4.30c 4.10b and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350.


Apache Tomcat before 5.5.35 6.x before 6.0.35 and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5 8.0 before 8.0(3a)su3 and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allow remote attackers to cause a denial of service (device reload) via a crafted SCCP registration aka Bug ID CSCtu73538.


validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records a different vulnerability than CVE-2011-4528.


Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723.


The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 when the db2 (aka Berkeley DB) back end is used allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors a different vulnerability than CVE-2011-1528.


The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444 read those files and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.


The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response (2) a completed TCP connection with no application data sent or (3) a large amount of application data a related issue to CVE-2011-1521.


family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data which allows remote attackers to cause a denial of service (application crash) via a crafted (1) AIM or (2) ICQ message associated with buddy-list addition.


The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.


The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl and then using the pktgen package in conjunction with a bridge device for a VLAN interface.


miniweb.exe in the HMI web server in Siemens WinCC flexible 2004 2005 2007 and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP OP MP Comfort Panels and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request.


The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure which allows remote attackers to cause a denial of service by leveraging connectivity to a network interface that uses an Ethernet bridge device.


Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.


The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call leading to an incorrect pointer dereference.


Cisco IOS 15.1 and 15.2 and IOS XE 3.x when configured as an IPsec hub with X.509 certificates in use allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors aka Bug ID CSCtq61128.


The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.


** DISPUTED ** Mozilla Network Security Services (NSS) 3.x with certain settings of the SSL_ENABLE_RENEGOTIATION option does not properly restrict client-initiated renegotiation within the SSL and TLS protocols which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection a different vulnerability than CVE-2011-1473. NOTE: it can also be argued that it is the responsibility of server deployments not a security library to prevent or limit renegotiation when it is inappropriate within a specific environment.


Rack before 1.1.3 1.2.x before 1.2.5 and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s.


BazisVirtualCDBus.sys in WinCDEmu 3.6 allows local users to cause a denial of service (system crash) via the unmount command to batchmnt.exe.


Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters as demonstrated by attacks against Node.js.


MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.


connection.c in Bip before 0.8.9 does not properly close sockets which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.


Oracle Glassfish 2.1.1 3.0.1 and 3.1.1 as used in Communications Server 2.0 Sun Java System Application Server 8.1 and 8.2 and possibly other products computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters aka Oracle security ticket S0104869.


The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier when gssapi-with-mic authentication is enabled allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.


Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.


The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files a different vulnerability than CVE-2012-0024.


imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse.


Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.


A denial-of-service risk was identified in the draft files area due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3 3.9 to 3.9.6 3.8 to 3.8.8 3.5 to 3.5.17 and earlier unsupported versions are affected.


A denial-of-service attack in WPA2 and WPA3-SAE authentication methods in D-Link DIR-X1560 v1.04B04 and DIR-X6060 v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames.


A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the \filename\ parameter via Wi-Fi since the app could fail to parse this.


A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated remote attacker to cause an affected CNC to become inaccessible to other devices.


A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.


A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.


A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.


A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.


Improper directory permissions in the installer for the Intel(R) System Defense Utility (all versions) may allow authenticated users to potentially enable a denial of service via local access.


winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via a large cch argument value to the mmioRead function as demonstrated by a crafted WAV file.


mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) via a crafted file.


wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) via a long Content-Type header which triggers a stack overflow.


netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function aka \Network Connection Manager Vulnerability.\


cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter which causes Site Server to abort and leaves the uploaded file in c:\\temp.


Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-33745 CVE-2021-34442 CVE-2021-34444.


Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-33745 CVE-2021-34442 CVE-2021-34499.


Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-33745 CVE-2021-34444 CVE-2021-34499.


Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-34442 CVE-2021-34444 CVE-2021-34499.


Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-27063.


Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-26896.


yum does not properly handle bad metadata which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.


SOAPpy 0.12.5 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.


OpenAFS 1.6.8 does not properly clear the fields in the host structure which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.


Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements.


Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it.


systemd 37-1 does not properly handle non-existent services which causes a denial of service (failure of login procedure).


Snort 1.8.3 does not properly define the minimum ICMP header size which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.


Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages.


Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a denial of service via forged \session start\ messages that cause AVR to connect to arbitrary hosts.


Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an authenticated user with low-privileges to trigger a denial of service event.


An error within the \LibRaw::xtrans_interpolate()\ function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition.


In Exiv2 0.26 there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack.


In Exiv2 0.26 there is a reachable assertion in the readHeader function in bigtiffimage.cpp which will lead to a remote denial of service attack via a crafted TIFF file.


In Exiv2 0.26 there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file.


In Exiv2 0.26 the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory access) via a crafted file.


In Exiv2 0.26 a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.


XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or network traffic consumption) or read arbitrary files via unspecified vectors.


XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document.


XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier 4.0 4.5 and 5.0 before CR4 allows remote authenticated users to cause a denial of service (memory consumption) via crafted XML data. IBM X-Force ID: 108357.


XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.


XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.


XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).


XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a crafted DTD in an XML request to uddi/api/replication aka SAP Security Note 2254389.


In F5 BIG-IP LTM AAM AFM Analytics APM ASM DNS Link Controller PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2 undisclosed HTTP requests may cause a denial of service.


On F5 BIG-IP 13.1.0-13.1.0.5 maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue.


IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could cause a denial of service. IBM X-Force ID: 138376.


Adobe Flash Media Server (FMS) before 3.0.6 and 3.5.x before 3.5.4 allows attackers to cause a denial of service via unspecified vectors related to an \input validation issue.\


Adobe Flash Media Server (FMS) before 3.0.6 and 3.5.x before 3.5.4 allows attackers to cause a denial of service via unspecified vectors related to a \JS method issue.\


Adobe Flash Media Server (FMS) before 3.5.6 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.


Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.


A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.


A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.


A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation resulting in denial of service.


A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing resulting in denial of service.


A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation resulting in denial of service.


A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing resulting in denial of service.


A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring resulting in denial of service.


A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element resulting in denial of service.


A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing resulting in denial of service.


A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the \Expect: 100-continue\ header may cause an out of memory error. This flaw may potentially lead to a denial of service.


A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.


A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system.


A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash resulting in a denial of service condition.


A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.


A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.


A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability.


A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service.


A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability.


A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service.


A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.


A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.


A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).


A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).


A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.


A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.


A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.


A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function a denial of service and a system crash by mounting and operating on a crafted ext4 filesystem image.


A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.


A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata() a denial of service and a system crash by mounting and operating on a crafted ext4 filesystem image.


A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code a denial of service and a system crash by unmounting a crafted ext4 filesystem image.


A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service.


A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.


A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.


A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c a crafted TIFF file can lead to an abort resulting in denial of service.


A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service posing a low risk to application availability.


A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.


Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.


Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7 1.21.x 1.22.0 and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.


Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy.


Double free vulnerability in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of service (ABEND) via search operations that trigger recursive filter_free calls.


Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service (daemon crash) via a (1) get or (2) mget command.


Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.


Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (device crash) via vectors related to Mach ports.


Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.


Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.


Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.


Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.


Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.


Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file.


Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.


Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.


Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.


Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997 as used in PDFium in Google Chrome allows remote attackers to cause a denial of service (process crash) via a crafted PDF.


Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.


Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.


Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.


Double free vulnerability in squashfs module in the Linux kernel 2.6.x as used in Fedora Core 5 and possibly other distributions allows local users to cause a denial of service by mounting a crafted squashfs filesystem.


Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22 when the xfrm6_tunnel module is enabled allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.


Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.


Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1 as used in the FlashPix PlugIn 4.2.2.0 for IrfanView allows remote attackers to cause a denial of service (crash) via a crafted FPX image.


Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to application exit.


Double free vulnerability in libxslt as used in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.


Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.


Double free vulnerability in Cisco IOS XE 3.15S 3.16S and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a sequence of crafted SNMP read requests aka Bug ID CSCux13174.


Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.


Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND).


Double free vulnerability in libxml2 as used in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.


Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.


Double free vulnerability in libxml2 as used in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.


Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.


The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument.


The FTP server in Apple Mac OS X 10.4.8 and earlier when FTP Access is enabled will crash when a login failure occurs with a valid user name which allows remote attackers to cause a denial of service (crash) and enumerate valid usernames.


The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a RETR command with a long pathname.


The FTP service in Internet Information Server (IIS) 4.0 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.


IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service (daemon crash) via crafted arguments to a setuid program.


For GitLab before 13.0.12 13.1.6 13.2.3 a denial of service exists in the project import feature


NVIDIA GPU Display Driver for Windows and Linux R450 and R460 driver branch contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated which may lead to denial of service.


NVIDIA GPU Display Driver for Windows and Linux all versions contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service.


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.


NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where the memory management software does not release a resource after its effective lifetime has ended which may lead to denial of service.


NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where improper input validation can cause denial of service.


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer where an unprivileged regular user can cause an out-of-bounds write which may lead to denial of service and data tampering.


NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invalid state produced by specific user actions may lead to denial of service.


NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service.


NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service.


Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.


Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.


Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.


The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.


The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443 aka Bug ID CSCuc53853.


The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a \?/\ string.


The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL or a long (2) username or (3) password during Basic Authentication.


The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.


Windows Hyper-V Denial of Service Vulnerability


Windows Hyper-V Denial of Service Vulnerability This CVE ID is unique from CVE-2021-33755.


Windows Hyper-V Denial of Service Vulnerability This CVE ID is unique from CVE-2021-33758.


Windows Hyper-V Denial of Service Vulnerability.


The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection as demonstrated by the abc\\r\\n\\r\\n string data.


The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface which allows remote attackers to cause a denial of service (process exit) via unknown vectors.


In IKARUS anti.virus 2.16.20 the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058.


In IKARUS anti.virus 2.16.20 the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084.


In IKARUS anti.virus 2.16.20 the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088.


Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet which may cause the switch to crash.


In ImageMagick 7.0.5-5 a memory leak was found in the function ReadPSDChannel in coders/psd.c which allows attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.5-5 a memory leak was found in the function ReadPDBImage in coders/pdb.c which allows attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.5-5 the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file.


In ImageMagick 7.0.5-5 the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-5 the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.