redhat fedora core core 1.0 vulnerabilities and exploits

(subscribe to this query)

445

VMScore

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote malicious users to cause a denial of service (memory consumption) via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the ber_...

Redhat Fedora Core 1.0

445

VMScore

dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote malicious users to cause a denial of service (CPU and memory consumption) via a ModDN operation with a DN that contains a large number of "," (comma) characters, which results in a large amou...

Redhat Fedora Core 1.0

694

VMScore

The LDAP component in Fedora Directory Server 1.0 allow remote malicious users to cause a denial of service (crash) via a certain "bad BER sequence" that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite.

Redhat Fedora Core 1.0

445

VMScore

Fedora Directory Server prior to 10 allows remote malicious users to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" dire...

Redhat Fedora Core 1.0

725

VMScore

X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepa...

X.org X11r7 1.0 X.org X11r7 1.0.1 X.org X11r6 6.9 Mandrakesoft Mandrake Linux 2006 Redhat Fedora Core Core 5.0 Sun Solaris 10.0 Suse Suse Linux 10.0

1 EDB exploit

606

VMScore

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations a...

694

VMScore

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. ...

2 Articles

187

VMScore

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows malicious users to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

Linux Linux Kernel 5.15 Linux Linux Kernel Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Redhat Developer Tools 1.0 Redhat Enterprise Linux For Real Time 8 Redhat Enterprise Linux For Real Time For Nfv 8 Redhat Codeready Linux Builder For Power Little Endian 8.0 Redhat Codeready Linux Builder 8.0 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6 Redhat Enterprise Linux Server Update Services For Sap Solutions 8.6 Redhat Enterprise Linux For Ibm Z Systems Eus 8.6 Redhat Enterprise Linux Server Tus 8.6 Redhat Enterprise Linux Eus 8.6 Redhat Codeready Linux Builder For Power Little Endian Eus 8.6 Redhat Codeready Linux Builder Eus 8.6 Redhat Enterprise Linux For Real Time 8.6 Redhat Enterprise Linux Server Eus 8.6 Redhat Enterprise Linux For Power Little Endian Eus 8.6

695

VMScore

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consu...

1 Article

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook