Lucene search
+L

1753 matches found

Mageia
Mageia
added 2016/08/09 8:58 a.m.54 views

Updated openntpd/busybox packages fix security vulnerability

The busybox NTP implementation doesn't check the NTP mode of packets received on the server port and responds to any packet with the right size. This includes responses from another NTP server. An attacker can send a packet with a spoofed source address in order to create an infinite loop of...

7.8CVSS2AI score0.08894EPSS
Exploits5References2
OSV
OSV
added 2016/08/09 8:58 a.m.6 views

MGASA-2016-0277 Updated openntpd/busybox packages fix security vulnerability

The busybox NTP implementation doesn't check the NTP mode of packets received on the server port and responds to any packet with the right size. This includes responses from another NTP server. An attacker can send a packet with a spoofed source address in order to create an infinite loop of...

7.8CVSS8.5AI score0.08894EPSS
Exploits5References3
CNVD
CNVD
added 2016/08/04 12:0 a.m.8 views

BusyBox 'networking/ntpd.c' Remote Denial of Service Vulnerability

BusyBox is an executable implementation of many standard Linux tools. A remote denial of service vulnerability exists in BusyBox 'networking/ntpd.c'. An attacker can exploit the vulnerability to cause an application to enter an infinite loop and consume excessive CPU resources, resulting in a...

7.8CVSS7.5AI score0.08894EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2016/08/03 12:18 p.m.51 views

CVE-2016-6301

The recvandprocessclientpkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged NTP packet, which triggers a communication loop...

7.8CVSS5.8AI score0.08894EPSS
Exploits5References1
ThreatPost
ThreatPost
added 2016/06/28 3:20 p.m.10 views

Botnet Powered by 25,000 CCTV Devices Uncovered

A botnet comprised entirely of internet-enabled closed circuit TV devices used a barrage of HTTP requests to knock a small jewelry store offline for days. Researchers who came across the botnet recently said they weren’t surprised that IoT devices were being used to carry out a distributed denial...

0.3AI score
Exploits0References5
Kitploit
Kitploit
added 2016/06/01 11:13 p.m.25 views

Intercepter-NG v1.9 - Multifunctional Network Toolkit for Android

Intercepter-NG is a multifunctional network toolkit for various types of IT specialists. It has functionality of several famous separate tools and more over offers a good and unique alternative of Wireshark for android. The main features are: Network discovery with OS detection Network traffic...

7.3AI score
Exploits0
CNVD
CNVD
added 2016/03/16 12:0 a.m.14 views

BusyBox OPTION_6RD Parsing Heap Buffer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. A heap buffer overflow vulnerability exists in BusyBox version 1.24.1, which stems from an error in udhcpc when the program parses the IPv6 Rapid Deployment DHCP...

9.8CVSS7.4AI score0.28429EPSS
Exploits4References1
Tenable Nessus
Tenable Nessus
added 2015/11/02 12:0 a.m.15 views

Debian DLA-337-1 : busybox security update

busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been fixed in busybox version 1.17.1-8+deb6u11. NOTE: Tenable Network...

5.3AI score
Exploits0References2
Debian
Debian
added 2015/10/31 5:14 a.m.18 views

[SECURITY] [DLA 337-1] busybox security update

Package : busybox Version : 1:1.17.1-8+deb6u11 Debian Bug : 803097 busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been...

7.2AI score
Exploits0
OSV
OSV
added 2015/10/31 12:0 a.m.12 views

DLA-337-1 busybox - security update

Bulletin has no description...

5.5CVSS7.2AI score0.02368EPSS
Exploits6
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.27 views

Oracle: Security Advisory (ELSA-2012-0308)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.05757EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.31 views

Oracle: Security Advisory (ELSA-2013-1732)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS9.6AI score0.00623EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.25 views

Oracle: Security Advisory (ELSA-2012-0810)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.05757EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.34 views

Gentoo Security Advisory GLSA 201503-13

Gentoo Linux Local Security Checks GLSA 201503-13 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

8.8CVSS6.4AI score0.05315EPSS
Exploits3References1
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.27 views

Gentoo Security Advisory GLSA 201312-02

Gentoo Linux Local Security Checks GLSA 201312-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

7.5CVSS6.1AI score0.05757EPSS
Exploits5References1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.30 views

Amazon Linux: Security Advisory (ALAS-2012-103)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.05757EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2015/09/01 12:0 a.m.38 views

SUSE SLED12 / SLES12 Security Update : busybox (SUSE-SU-2015:1445-1)

-The following issues are fixed by this update: CVE-2014-9645: do not allow / in module names to avoid loading bad modules bnc914660 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

5.5CVSS6.3AI score0.00635EPSS
Exploits2References4
Metasploit
Metasploit
added 2015/08/28 2:17 p.m.28 views

BusyBox DMZ Configuration

This module will be applied on a session connected to a BusyBox shell. It allows to manage traffic forwarding to a target host through the BusyBox device. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Exploits0
Metasploit
Metasploit
added 2015/08/28 2:17 p.m.48 views

BusyBox DNS Configuration

This module will be applied on a session connected to a BusyBox shell. It allows to set the DNS server on the device executing BusyBox so it will be sent by the DHCP server to network hosts. This module requires Metasploit: https://metasploit.com/download Current source:...

Exploits0
Metasploit
Metasploit
added 2015/08/28 2:17 p.m.47 views

BusyBox Ping Network Enumeration

This module will be applied on a session connected to a BusyBox shell. It will ping a range of IP addresses from the router or device executing BusyBox. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

7.2AI score
Exploits0
Rows per page
Query Builder