SOL16873 - ISC DHCP vulnerability CVE-2012-3955

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

Hospira Plum A+ and Symbiq Infusion Systems Vulnerabilities

OVERVIEW Independent researcher Billy Rios has identified vulnerabilities in Hospira’s Plum A+ Infusion System that are similar to vulnerabilities identified in Hospira’s LifeCare PCA Infusion System discussed in advisory, ICSA-15-125-01B Hospira LifeCare PCA Infusion System Vulnerabilities...

Oracle Solaris Third-Party Patch Update : isc-dhcp (cve_2012_3955_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service daemon crash in opportunistic circumstances by establishing an IPv6 lease in an environment where...

RHEL 6 : rhev-hypervisor6 (RHSA-2013:0579)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:0579 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

CVE-2014-3955

routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service assertion failure and daemon exit via an RIP request from a source not on a directly connected network...

CVE-2014-3955

CVE-2014-3955 affects FreeBSD routed(8). The input path of RIP queries will accept from any source, but the output path assumes the reply is to a directly connected network, causing an assertion failure and daemon exit when a query originates off-subnet. Impact is a denial of service (routing tab...

FreeBSD Security Advisory FreeBSD-SA-14:21.routed

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-14:21.routed Security Advisory The FreeBSD Project Topic: routed8 remote denial of service vulnerability Category: core Module: routed Announced: 2014-10-21...

openSUSE Security Update : dhcp (openSUSE-SU-2012:1254-1)

Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue...

openSUSE Security Update : dhcp (openSUSE-SU-2012:1252-1)

Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue...

Apple iOS XNU内核‘get_xattrinfo’函数拒绝服务漏洞

CVE-2013-3955 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 iPad设备上的Apple iOS 5.x版本和6.x至6.1.3版本中的XNU内核中的‘getxattrinfo’函数中存在漏洞，该漏洞源于程序没有正确地验证AppleDouble文件的头。本地攻击者可通过msdosfs文件系统上的无效文件利用该漏洞造成拒绝服务（内存损坏）或产生其他未明影响。 0 Apple iOS 5.x Apple iOS 6.x Apple iOS 6.1.3...

CVE-2013-3955

The CVE-2013-3955 issue affects Apple iOS XNU kernel (iOS 5.x–6.x up to 6.1.3 on iPad). It stems from get_xattrinfo failing to validate the AppleDouble file header, enabling a local attacker to trigger memory corruption (DoS) or other impact via an invalid AppleDouble file on msdosfs. The vulnera...

CentOS Update for dhclient CESA-2013:0504 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Low: dhcp

Issue Overview: A flaw was found in the way the dhcpd daemon handled the expiration time of IPv6 leases. If dhcpd's configuration was changed to reduce the default IPv6 lease time, lease renewal requests for previously assigned leases could cause dhcpd to crash. CVE-2012-3955 Affected Packages:...

dhcp security and bug fix update

12:4.1.1-34.P1.0.1.el6 - Added oracle-errwarn-message.patch 12:4.1.1-34.P1 - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 12:4.1.1-33.P1 - Use getifaddrs for interface discovery code on Linux 803540 - dhclient-script: do not backup&restore...

RedHat Update for dhcp RHSA-2013:0504-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : dhcp (RHSA-2013:0504)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0504 advisory. The dhcp packages provide the Dynamic Host Configuration Protocol DHCP that allows individual devices on an IP network to get their own network...

SuSE 11.2 Security Update : dhcp (SAT Patch Number 6831)

This update to ISC dhcp-4.2.4-P2 release provides a security fix for an issue with the use of lease times. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. CVE-2012-3955 has be...

RHEL 4 : acroread (RHSA-2010:0038)

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Reader allows users to view and print documents in Portable Document Form...

RHEL 5 : acroread (RHSA-2010:0037)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0037 advisory. - acroread: multiple code execution flaws APSB10-02 CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3959 - acroread: script injection...

RHEL 3 : acroread (RHSA-2010:0060)

The acroread packages as shipped in Red Hat Enterprise Linux 3 Extras contain security flaws and should not be used. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Reader allows users to view and print documents in Portable Document Form...