PT-2015-7147

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 1000V devices version 5.21SV31.4 Cisco NX-OS on Nexus 3000 devices version 7.30ZD0.47 Cisco NX-OS on Nexus 4000 devices version 4.12E1 Cisco NX-OS on Nexus 9000 devices version 7.30ZD0.61 Cisco NX-OS on MDS 9000 devices...

Cisco NX-OS Internet Group Management Protocol Denial of Service Vulnerability

A vulnerability in the Internet Group Management Protocol version 3 IGMPv3 input packet processing of Cisco NX-OS could allow an unauthenticated, adjacent attacker to cause the IGMP process to restart due to a malformed IGMP packet, which could cause a denial of service DoS condition on the devic...

Cisco Nexus Operating System Address Resolution Protocol Denial of Service Vulnerability

A vulnerability in the Address Resolution Protocol ARP input packet processing of the Cisco Nexus Operating System NX-OS devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of the ARP packet and the...

PT-2015-2243

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.12E11b through 7.30ZN0.9 Cisco Nexus 1000V devices for VMware vSphere version 7.30ZN0.9 Cisco Nexus 3000 devices versions 6.02U51.41 through 7.30ZN0.83 Cisco Nexus 4000 devices version 4.12E11b Cisco Nexus 7000 devices...

PT-2015-3188

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.5102.0 through 7.61.62 Description The issue is related to errors in resource management, allowing remote attackers to cause a denial of service by triggering an exception during attempted forwarding of...

Cisco IOS XE DHCPv6 Server DoS

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCPv6 server implementation due to improper handling of DHCPv6 packets for SOLICIT messages for Identity Association for Non-Temporary Addresses...

Cisco IOS XE Software Overlay Transport Virtualization (OTV) DoS

The remote Cisco device is affected by a denial of service vulnerability due to improper processing of oversized Overlay Transport Virtualization OTV frames. An unauthenticated, adjacent attacker can exploit this, by sending a large number of oversized OTV frames requiring fragmentation and...

PT-2015-4846

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.3S Description The issue is related to the improper processing of malformed ISDN Q931 SETUP messages in the ISDN implementation, which can cause a denial of service device reload. An unauthenticated, adjacent attacker can...

PT-2015-4838

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.5.x through 7.6.119 Description A denial of service issue exists due to improper input sanitization of a certain value supplied by a user prior to authentication. An attacker could exploit this by...

qemu, xen and VirtualBox OSE -- possible VM escape and code execution ("VENOM")

Jason Geffner, CrowdStrike Senior Security Researcher reports: VENOM, CVE-2015-3456, is a security vulnerability in the virtual floppy drive code used by many computer virtualization platforms. This vulnerability may allow an attacker to escape from the confines of an affected virtual machine VM...

Fixed in Apache Tomcat JK Connector 1.2.41

Important: Information disclosure CVE-2014-8111 Multiple adjacent slashes in a request URI were not collapsed to a single slash before comparing the request URI to the configured mount and unmount patterns. It is therefore possible for an attacker to use a request URI containing multiple adjacent...

PT-2015-4802

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.3103.8 through 7.4110.0 Description The web-authentication functionality on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device reload via a malform...

xorg-server -- Information leak in the XkbSetGeometry request of X servers.

Peter Hutterer reports: Olivier Fourdan from Red Hat has discovered a protocol handling issue in the way the X server code base handles the XkbSetGeometry request. The issue stems from the server trusting the client to send valid string lengths in the request data. A malicious client with string...

Juniper Junos Fragmented OSPFv3 Packet DoS (JSA10668)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability when processing fragmented OSPFv3 packets with an IPsec Authentication Header AH. A remote attacker on an adjacent network can exploit this issue to crash the kernel,...

Cisco Aironet DHCP Denial of Service Vulnerability

A vulnerability in the DHCP subsystem of Cisco Aironet access points could allow an unauthenticated, adjacent attacker to create a denial of service condition. The vulnerability is due to an error condition that may occur when very short DHCP leases are in use. If an attacker can prevent the acce...

Cisco Aironet EAP Debugging Denial of Service Vulnerability

A vulnerability in the debugging features of Cisco IOS running on Cisco Aironet access points could allow an unauthenticated, adjacent attacker to create a denial of service condition. The vulnerability is due to a failure to properly process a certain debugging message that may occur when the...

Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing of malformed Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit NPU and a line...

PT-2014-5227

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier Description The issue is related to improper NetFlow sampling of packets with multicast destination MAC addresses, which can cause a denial of service. This can be exploited by an unauthenticated, adjace...

Cisco Small Cell Command Execution Vulnerability

A vulnerability in the DHCP client implementation of Cisco Small Cell products could allow an unauthenticated, adjacent attacker to execute commands and possibly take full control of the affected device. The vulnerability is due to improper parsing of crafted DHCP messages. An attacker could...

Tripbit Secure Code Analizer 1.0 - Local fgets() Buffer Overrun

No description provided by source. source: http://www.securityfocus.com/bid/8028/info A buffer overrun has been discovered in Tripbit Secure Code Analizer when reading data from source files. The problem occurs due to an insecure use of the fgets function. This vulnerability could be triggered by...