Where
AND
AND
-Infinity
0
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network behavior that triggers a divide-by-zero error.

First published (updated )
Severity
4.6
Buffer Overflow
AV:L/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

First published (updated )
Severity
4.9
AV:L/AC:L/Au:N/C:N/I:N/A:C

The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.

First published (updated )
Severity
5
Buffer Overflow
AV:N/AC:L/Au:N/C:N/I:N/A:P

in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.

First published (updated )
Severity
6.4
AV:N/AC:L/Au:N/C:P/I:N/A:P

htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).

First published (updated )
Severity
5
Path Traversal
AV:N/AC:L/Au:N/C:P/I:N/A:N

The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) modnegotiation, (2) moddir, or (3) modautoindex.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

First published (updated )
Severity
4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:P/I:N/A:N

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

Denial of service in Linux syslogd via a large number of connections.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

Denial of service in Debian IRC Epic/epic4 client via a long string.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:N/A:P

rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203