CVE-2017-9491

The CVE-2017-9491 entry affects Comcast firmware on Cisco DPC3939, DPC3939B, DPC3941T, and Arris TG1682G devices. The underlying issue is that cookies used in the administration HTTPS session do not set the secure flag, enabling cookies to be captured if session traffic is intercepted in HTTP. Th...

CVE-2014-9491

The vulnerability CVE-2014-9491 affects illumos specifically in the devzvol_readdir function, where the code path does not validate the return value of strchr. This can lead to a NULL pointer dereference and a denial of service (panic) via unspecified remote vectors. Documented impact is a partia...

CVE-2014-9491

The devzvolreaddir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors...