Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2017-1023)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : memcached (EulerOS-SA-2019-2631)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...

EulerOS 2.0 SP2 : memcached (EulerOS-SA-2019-2391)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault...

DDoS-for-Hire Boss Gets 13 Months Jail Time

A 21-year-old Illinois man was sentenced last week to 13 months in prison for running multiple DDoS-for-hire services that launched millions of attacks over several years. This individual's sentencing comes more than five years after KrebsOnSecurity interviewed both the defendant and his father a...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

DEBIAN-CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

UBUNTU-CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 is vulnerable to a traffic amplification issue in the cmdmon protocol (CVE-2014-0021). The flaw allows an attacker to exploit chronyd over the network, potentially abusing the protocol’s cmdmon handling. Public records across OSV and Nessus references affirm this CVE affectin...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

EulerOS 2.0 SP5 : memcached (EulerOS-SA-2019-2213)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...

CVE-2019-6015

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities...

CVE-2019-6015

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities...

Open redirect

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities...

CVE-2019-6015

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities...

CVE-2019-6015

The CVE-2019-6015 entry concerns FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B routers with firmware up to version 1.1.7 that may act as open resolvers. This behavior can allow the device to be used in DNS amplification attacks against external targets. The linked documents provide...

FON routers may behave as an open resolver

Overview FON routers contain an issue where they may behave as open resolvers. A device that behaves as a DNS resolver for recursive DNS queries from anyone on the internet is called "Open Resolver". FON routers contain an issue where they may behave as open resolvers. Hideyoshi Okazaki of ARTERI...

Multiple FON Products Input Validation Error Vulnerability

The Fon Wireless FON2601E-SE, among others, is a wireless router from the Spanish company Fon Wireless. An input validation error vulnerability exists in multiple FON products, which can be exploited by attackers to conduct DNS amplification attacks against certain other entities via the FON...