CVE-2014-8714

wireshark: TN5250 infinite loop (wnpa-sec-2014-23)

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2014-9718

Qemu: PRDT overflow from guest to host

The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2014-9745

freetype: Infinite loop in parse_encoding in t1load.c

The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed

Vendors

Canonical Debian Freetype and 1 more

Products

Ubuntu Linux Debian Linux Freetype and 1 more

CVE-2008-7316

kernel: writev regression: pan hanging unkillable and un-straceable

mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2015-0410

OpenJDK: DER decoder infinite loop (Security, 8059485)

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

CVSS 2.0 · 5.0 Medium EPSS 5.0% KEV · Not listed

Vendors

Canonical Debian Novell and 3 more

Products

Ubuntu Linux Debian Linux Suse Linux Enterprise Desktop and 9 more

CVE-2015-2191

wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed

Vendors

Debian Mageia Opensuse and 2 more

Products

Debian Linux Mageia Opensuse and 2 more

CVE-2015-2192

wireshark: SCSI OSD dissector could go into an infinite loop (wnpa-sec-2015-11)

Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2015-2316

Django: possible denial of service in strip_tags()

The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.

CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed

Vendors

Canonical Djangoproject Fedoraproject and 2 more

Products

Ubuntu Linux Django Fedora and 2 more

CVE-2015-3223

libldb: Remote DoS in Samba (AD) LDAP server

The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.

CVSS 3.0 · 5.3 Medium EPSS 6.9% KEV · Not listed

Vendors

Redhat Samba

Products

Enterprise Linux Storage Samba

CVE-2015-3808

wireshark: LBMR infinite loop (wnpa-sec-2015-12)

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 2.8% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2015-3809

wireshark: LBMR infinite loop (wnpa-sec-2015-12)

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2015-3810

wireshark: WebSocket DoS (wnpa-sec-2015-13)

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

CVSS 2.0 · 7.8 High EPSS 3.5% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2015-3814

wireshark: IEEE 802.11 infinite loop (wnpa-sec-2015-17)

The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed

Vendors

Oracle Wireshark

Products

Solaris Wireshark

CVE-2015-5307

virt: guest to host DoS by triggering an infinite loop in microcode via #AC exception

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 3 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 6 more

CVE-2015-5364

kernel: net: incorrect processing of checksums in UDP implementation

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

CVSS 2.0 · 7.8 High EPSS 6.1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 6 more

CVE-2015-5366

kernel: net: incorrect processing of checksums in UDP implementation

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.

CVSS 2.0 · 5.0 Medium EPSS 6.1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Linux Server Aus and 4 more

CVE-2015-6525

libevent: multiple integer overflows in the evbuffer APIs

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed

Vendors

Debian Libevent Project

Products

Debian Linux Libevent

CVE-2015-6526

kernel: perf on ppc64 can loop forever getting userlevel stacktraces

The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service (infinite loop) via a deep 64-bit userspace backtrace.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2015-8041

wpa_supplicant: Incomplete WPS and P2P NFC NDEF record payload length validation

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed

Vendors

Opensuse W1.fi

Products

Opensuse Hostapd Wpa Supplicant

CVE-2016-8910

Qemu: net: rtl8139: infinite loop while transmit in C+ mode

The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Opensuse Qemu and 1 more

Products

Debian Linux Leap Qemu and 3 more