ByteOS

>>postgresql>>Versions from 7.4(inclusive) to 7.4.19(exclusive)

>>postgresql>>Versions from 8.0(inclusive) to 8.0.15(exclusive)

>>postgresql>>Versions from 8.1(inclusive) to 8.1.11(exclusive)

>>postgresql>>Versions from 8.2(inclusive) to 8.2.6(exclusive)

cpe:2.3:a:tcl:tcl\/tk:*:*:*:*:*:*:*:*

TCL

>>tcl\/tk>>Versions before 8.4.17(exclusive)

Debian GNU/Linux

>>debian_linux>>3.1

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

>>ubuntu_linux>>6.06

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

>>ubuntu_linux>>6.10

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

>>ubuntu_linux>>7.04

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

>>ubuntu_linux>>7.10

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154	cve@mitre.org	Broken Link
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html	cve@mitre.org	Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0122.html	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28359	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28376	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28437	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28438	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28454	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28455	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28464	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28477	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28479	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28679	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28698	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29070	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29248	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29638	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/30535	cve@mitre.org	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200801-15.xml	cve@mitre.org	Third Party Advisory
http://securitytracker.com/id?1019157	cve@mitre.org	Third Party Advisory VDB Entry
http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894	cve@mitre.org	Third Party Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894	cve@mitre.org	Exploit Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1	cve@mitre.org	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1	cve@mitre.org	Broken Link
http://www.debian.org/security/2008/dsa-1460	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2008/dsa-1463	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:004	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:059	cve@mitre.org	Third Party Advisory
http://www.postgresql.org/about/news.905	cve@mitre.org	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0038.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0040.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0134.html	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/archive/1/485864/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/486407/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/493080/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/27163	cve@mitre.org	Patch Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0009.html	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0061	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0109	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/1071/references	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/1744	cve@mitre.org	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/39497	cve@mitre.org	Third Party Advisory VDB Entry
https://issues.rpath.com/browse/RPL-1768	cve@mitre.org	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569	cve@mitre.org	Third Party Advisory
https://usn.ubuntu.com/568-1/	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html	cve@mitre.org	Third Party Advisory

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-0122.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28359

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28376

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28437

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28438

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28454

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28455

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28464

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28477

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28479

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28679

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28698

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29070

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29248

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29638

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/30535

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://security.gentoo.org/glsa/glsa-200801-15.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://securitytracker.com/id?1019157

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894

Source: cve@mitre.org

Resource:

Exploit

Third Party Advisory

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.debian.org/security/2008/dsa-1460

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2008/dsa-1463

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2008:004

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2008:059

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.postgresql.org/about/news.905

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0038.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0040.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0134.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/archive/1/485864/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/486407/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/27163

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

VDB Entry

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0061

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0109

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/1071/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/1744

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/39497

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://issues.rpath.com/browse/RPL-1768

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/568-1/

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Similar CVEs

306Records found

CVE-2009-0922

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-8.64% / 92.07%

7 Day CHG~0.00%

Published-17 Mar, 2009 | 17:00

Updated-07 Aug, 2024 | 04:57

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

Product-postgresql n/a

CWE ID-CWE-399

Not Available

CVE-2020-20445

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-2.07% / 83.19%

7 Day CHG~0.00%

Published-25 May, 2021 | 17:27

Updated-04 Aug, 2024 | 14:22

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.

Vendor-n/a Debian GNU/Linux FFmpeg

Product-ffmpeg debian_linux n/a

CWE ID-CWE-369

Divide By Zero

CVE-2013-5891

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.53% / 66.44%

7 Day CHG~0.00%

Published-15 Jan, 2014 | 01:33

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

Vendor-n/a MariaDB Foundation Red Hat, Inc.Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-enterprise_linux_server mariadb mysql ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation debian_linux n/a

CVE-2017-3238

Matching Score-8

Assigner-Oracle

Product-enterprise_linux_desktop enterprise_linux_server_tus enterprise_linux_eus enterprise_linux_workstation mariadb debian_linux enterprise_linux_server mysql enterprise_linux_server_aus MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-3.79% / 87.61%

7 Day CHG~0.00%

Published-27 Jan, 2017 | 22:01

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation MariaDB Foundation

CVE-2017-3258

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.61% / 68.85%

7 Day CHG~0.00%

Published-27 Jan, 2017 | 22:01

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation MariaDB Foundation

CWE ID-CWE-20

Improper Input Validation

CVE-2017-3453

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.28% / 50.76%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation MariaDB Foundation

CVE-2017-3461

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.41% / 60.54%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2017-3462

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.46% / 63.24%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

CVE-2017-3641

Matching Score-8

Assigner-Oracle

Product-enterprise_linux_desktop enterprise_linux_server_tus enterprise_linux_workstation enterprise_linux_server_eus mariadb enterprise_linux_server debian_linux mysql enterprise_linux_server_aus openstack MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.12% / 31.42%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation MariaDB Foundation

CVE-2017-3463

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.41% / 60.54%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

CVE-2019-2581

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux software_collections enterprise_linux_server_aus enterprise_linux fedora enterprise_linux_eus enterprise_linux_server_tus mysql MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.48% / 64.27%

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:49

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Fedora Project Red Hat, Inc.Canonical Ltd.

CVE-2017-3308

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.7||HIGH

EPSS-0.32% / 54.73%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation MariaDB Foundation

CVE-2019-2683

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux software_collections enterprise_linux_server_aus enterprise_linux enterprise_linux_eus enterprise_linux_server_tus mysql MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.27% / 49.80%

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:40

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Red Hat, Inc.Canonical Ltd.

CVE-2017-3648

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.4||MEDIUM

EPSS-0.41% / 60.54%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2013-3783

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.84% / 73.71%

7 Day CHG~0.00%

Published-17 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Parser.

Vendor-n/a openSUSE SUSE MariaDB Foundation Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-mariadb mysql opensuse ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_server linux_enterprise_software_development_kit n/a

CVE-2006-5541

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.76% / 81.83%

7 Day CHG~0.00%

Published-26 Oct, 2006 | 17:00

Updated-07 Aug, 2024 | 19:55

backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.

Product-postgresql n/a

CVE-2006-5540

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.62% / 81.07%

7 Day CHG~0.00%

Published-26 Oct, 2006 | 17:00

Updated-07 Aug, 2024 | 19:55

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Product-postgresql n/a

CVE-2013-3839

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.57% / 67.57%

7 Day CHG-0.25%

Published-16 Oct, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Vendor-n/a MariaDB Foundation Red Hat, Inc.Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-enterprise_linux_server mariadb mysql ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation debian_linux n/a

CVE-2013-3793

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.80% / 73.13%

7 Day CHG~0.00%

Published-17 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.

Vendor-n/a openSUSE SUSE MariaDB Foundation Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-solaris mariadb mysql opensuse ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_server linux_enterprise_software_development_kit n/a

CVE-2013-3804

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.65% / 69.92%

7 Day CHG~0.00%

Published-17 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Vendor-n/a openSUSE SUSE MariaDB Foundation Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-mariadb mysql opensuse ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_server linux_enterprise_software_development_kit n/a

CVE-2013-4296

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4||MEDIUM

EPSS-3.29% / 86.69%

7 Day CHG~0.00%

Published-30 Sep, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call.

Vendor-n/a Red Hat, Inc.Canonical Ltd.

Product-enterprise_linux libvirt ubuntu_linux n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3802

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.47% / 63.59%

7 Day CHG~0.00%

Published-17 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a openSUSE SUSE MariaDB Foundation Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-mariadb mysql opensuse ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_server linux_enterprise_software_development_kit n/a

CVE-2020-14656

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.41% / 60.81%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-27 Sep, 2024 | 18:26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2013-1838

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4||MEDIUM

EPSS-1.43% / 79.83%

7 Day CHG~0.00%

Published-22 Mar, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Vendor-n/a OpenStack Canonical Ltd.

Product-folsom essex ubuntu_linux grizzly n/a

CVE-2013-0368

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.71% / 71.40%

7 Day CHG~0.00%

Published-17 Jan, 2013 | 01:30

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

Vendor-n/a Oracle Corporation MariaDB Foundation Canonical Ltd.

Product-mariadb mysql ubuntu_linux n/a

CVE-2016-8734

Matching Score-8

Assigner-Apache Software Foundation

Matching Score-8

Assigner-Apache Software Foundation

CVSS Score-6.5||MEDIUM

EPSS-6.03% / 90.36%

7 Day CHG~0.00%

Published-16 Oct, 2017 | 13:00

Updated-20 Apr, 2025 | 01:37

Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.

Vendor-The Apache Software Foundation Debian GNU/Linux

Product-debian_linux subversion Apache Subversion

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-3004

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.91% / 74.80%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2012-3173

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.54% / 66.47%

7 Day CHG~0.00%

Published-17 Oct, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.

Vendor-n/a Canonical Ltd.Red Hat, Inc.Oracle Corporation MariaDB Foundation Debian GNU/Linux

Product-enterprise_linux_desktop ubuntu_linux enterprise_linux_eus enterprise_linux_workstation mariadb debian_linux mysql enterprise_linux_server n/a

CVE-2012-3166

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.54% / 66.47%

7 Day CHG~0.00%

Published-17 Oct, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Canonical Ltd.Red Hat, Inc.Oracle Corporation MariaDB Foundation Debian GNU/Linux

Product-enterprise_linux_desktop ubuntu_linux enterprise_linux_eus enterprise_linux_workstation mariadb mysql debian_linux enterprise_linux enterprise_linux_server n/a

CVE-2021-37750

Matching Score-8

Assigner-MITRE Corporation

Vendor-starwindsoftware n/a Oracle Corporation Debian GNU/Linux MIT (Massachusetts Institute of Technology)Fedora Project

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.45% / 62.88%

7 Day CHG~0.00%

Published-23 Aug, 2021 | 00:00

Updated-04 Aug, 2024 | 01:30

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Product-communications_cloud_native_core_network_slice_selection_function debian_linux starwind_virtual_san fedora kerberos_5 n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-3011

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.91% / 74.80%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2021-3634

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.11% / 29.70%

7 Day CHG~0.00%

Published-31 Aug, 2021 | 00:00

Updated-03 Aug, 2024 | 17:01

A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.

Vendor-libssh n/a Red Hat, Inc.Oracle Corporation NetApp, Inc.Debian GNU/Linux Fedora Project

Product-virtualization debian_linux cloud_backup fedora enterprise_linux libssh mysql_workbench libssh

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-3009

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.4||MEDIUM

EPSS-0.51% / 65.59%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2012-1705

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.71% / 71.40%

7 Day CHG~0.00%

Published-17 Jan, 2013 | 01:30

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Vendor-n/a Canonical Ltd.Red Hat, Inc.Oracle Corporation MariaDB Foundation

Product-enterprise_linux_desktop ubuntu_linux enterprise_linux_eus enterprise_linux_workstation mariadb mysql enterprise_linux_server n/a

CVE-2021-31806

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-73.68% / 98.76%

7 Day CHG-1.30%

Published-27 May, 2021 | 00:00

Updated-03 Aug, 2024 | 23:10

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.

Vendor-n/a Fedora Project NetApp, Inc.Debian GNU/Linux Squid Cache

Product-squid fedora debian_linux cloud_manager n/a

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CVE-2021-31808

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.27% / 49.90%

7 Day CHG-0.03%

Published-27 May, 2021 | 00:00

Updated-03 Aug, 2024 | 23:10

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.

Vendor-n/a Fedora Project NetApp, Inc.Debian GNU/Linux Squid Cache

Product-squid cloud_manager debian_linux fedora n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-2775

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.57% / 67.64%

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Canonical Ltd.

Product-ubuntu_linux mysql MySQL Server

CVE-2006-5542

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.62% / 81.07%

7 Day CHG~0.00%

Published-26 Oct, 2006 | 17:00

Updated-07 Aug, 2024 | 19:55

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements.

Product-postgresql n/a

CVE-2019-2998

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.51% / 65.59%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2011-0762

Matching Score-8

Assigner-CERT/CC

Matching Score-8

Assigner-CERT/CC

CVSS Score-4||MEDIUM

EPSS-36.87% / 97.02%

7 Day CHG~0.00%

Published-02 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.

Vendor-vsftpd_project n/a SUSE Debian GNU/Linux Canonical Ltd.Fedora Project openSUSE

Product-ubuntu_linux fedora opensuse debian_linux vsftpd linux_enterprise_server n/a

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2010-3439

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.57% / 67.57%

7 Day CHG~0.00%

Published-12 Nov, 2019 | 20:00

Updated-07 Aug, 2024 | 03:11

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command.

Vendor-cor-entertainment alien-arena Debian GNU/Linux Fedora Project

Product-alien-arena debian_linux fedora alien-arena

CWE ID-CWE-20

Improper Input Validation

CVE-2010-2490

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 65.06%

7 Day CHG~0.00%

Published-31 Oct, 2019 | 15:23

Updated-07 Aug, 2024 | 02:32

Mumble: murmur-server has DoS due to malformed client query

Vendor-mumble n/a Debian GNU/Linux

Product-mumble debian_linux n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-0629

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-2.28% / 84.04%

7 Day CHG~0.00%

Published-07 Apr, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Vendor-n/a SUSE Canonical Ltd.Fedora Project MIT (Massachusetts Institute of Technology)openSUSE

Product-ubuntu_linux fedora opensuse linux_enterprise kerberos_5 n/a

CWE ID-CWE-416

Use After Free

CVE-2019-3003

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.42% / 61.05%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:22

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2997

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.36% / 57.24%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-3824

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-8.82% / 92.17%

7 Day CHG~0.00%

Published-06 Mar, 2019 | 15:00

Updated-04 Aug, 2024 | 19:19

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.

Vendor-n/a Canonical Ltd.Debian GNU/Linux Samba

Product-ubuntu_linux debian_linux samba n/a

CWE ID-CWE-125

Out-of-bounds Read

CVE-2009-2906

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4||MEDIUM

EPSS-0.35% / 56.63%

7 Day CHG~0.00%

Published-07 Oct, 2009 | 18:00

Updated-07 Aug, 2024 | 06:07

smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.

Vendor-n/a Canonical Ltd.Samba

Product-ubuntu_linux samba n/a

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2009-3229

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.33% / 79.11%

7 Day CHG~0.00%

Published-17 Sep, 2009 | 10:00

Updated-07 Aug, 2024 | 06:22

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.

Product-postgresql n/a

CVE-2019-2948

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.42% / 61.05%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2740

Matching Score-8

Assigner-Oracle