CVE-2015-4792
- EPSS 0.92%
- Published 21.10.2015 21:59:09
- Last modified 12.04.2025 10:46:40
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.
CVE-2015-0275
- EPSS 0.11%
- Published 19.10.2015 10:59:00
- Last modified 12.04.2025 10:46:40
The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.
CVE-2014-9751
- EPSS 9.65%
- Published 06.10.2015 01:59:02
- Last modified 12.04.2025 10:46:40
The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packe...
CVE-2014-9750
- EPSS 10.16%
- Published 06.10.2015 01:59:00
- Last modified 12.04.2025 10:46:40
ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field...
CVE-2015-6248
- EPSS 0.68%
- Published 24.08.2015 23:59:08
- Last modified 12.04.2025 10:46:40
The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application cras...
CVE-2015-6246
- EPSS 0.66%
- Published 24.08.2015 23:59:06
- Last modified 12.04.2025 10:46:40
The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a craft...
CVE-2015-6245
- EPSS 0.38%
- Published 24.08.2015 23:59:05
- Last modified 12.04.2025 10:46:40
epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
CVE-2015-6244
- EPSS 0.8%
- Published 24.08.2015 23:59:04
- Last modified 12.04.2025 10:46:40
The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of servi...
CVE-2015-6243
- EPSS 0.66%
- Published 24.08.2015 23:59:03
- Last modified 12.04.2025 10:46:40
The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1)...
- EPSS 2.91%
- Published 14.08.2015 18:59:03
- Last modified 12.04.2025 10:46:40
The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.