CVE-2015-3238

pam: DoS/user enumeration due to blocking pipe in pam_unix module

The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.

CVSS 3.0 · 6.5 Medium EPSS 2.7% KEV · Not listed

Vendors

Linux-pam Oracle Redhat

Products

Linux-pam Sparc-opl Service Processor Enterprise Linux

CVE-2015-3223

libldb: Remote DoS in Samba (AD) LDAP server

The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.

CVSS 3.0 · 5.3 Medium EPSS 6.9% KEV · Not listed

Vendors

Redhat Samba

Products

Enterprise Linux Storage Samba

CVE-2015-2192

wireshark: SCSI OSD dissector could go into an infinite loop (wnpa-sec-2015-11)

Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed

Vendors

Opensuse Wireshark

Products

Opensuse Wireshark

CVE-2015-2191

wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed

Vendors

Debian Mageia Opensuse and 2 more

Products

Debian Linux Mageia Opensuse and 2 more

CVE-2016-7908

Qemu: net: Infinite loop in mcf_fec_do_tx()

The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2015-0283

slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

CVSS 2.0 · 7.8 High EPSS 3.1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Slapi-nis

CVE-2014-9745

freetype: Infinite loop in parse_encoding in t1load.c

The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed

Vendors

Canonical Debian Freetype and 1 more

Products

Ubuntu Linux Debian Linux Freetype and 1 more

CVE-2014-0238

file: CDF property info parsing nelements infinite loop

The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.

CVSS 2.0 · 5.0 Medium EPSS 18.8% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Enterprise Linux and 1 more

CVE-2014-9402

glibc: denial of service in getnetbyname function

The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.

CVSS 2.0 · 7.8 High EPSS 7.8% KEV · Not listed

Vendors

Canonical Gnu Opensuse and 1 more

Products

Ubuntu Linux Glibc Opensuse and 1 more

CVE-2014-8714

wireshark: TN5250 infinite loop (wnpa-sec-2014-23)

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2014-0095

8: Denial of service via AJP requests with content length zero

java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing.

CVSS 2.0 · 5.0 Medium EPSS 8.5% KEV · Not listed

Vendors

Apache

Products

Tomcat

CVE-2016-7421

Qemu: scsi: pvscsi: infinite loop when processing IO requests

The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2016-7907

Qemu: net: inifinte loop in imx_fec_do_tx() function

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2015-6247

wireshark: OpenFlow dissector infinite loop (wnpa-sec-2015-27)

The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset value, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed

Vendors

Oracle Wireshark

Products

Solaris Wireshark

CVE-2014-9718

Qemu: PRDT overflow from guest to host

The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2014-9420

Kernel: fs: isofs: infinite loop in CE record entries

The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 1 more

CVE-2016-7909

Qemu: net: pcnet: infinite loop in pcnet_rdra_addr()

The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2015-6245

wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)

epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed

Vendors

Oracle Redhat Wireshark

Products

Linux Solaris Enterprise Linux and 1 more

CVE-2016-3190

cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans

The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Cairographics Opensuse Redhat

Products

Cairo Opensuse Enterprise Linux

CVE-2014-6272

libevent: potential heap overflow in buffer/bufferevent APIs

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Debian Libevent Project

Products

Debian Linux Libevent