87 matches found
Unbreakable Enterprise kernel security update
5.15.0-105.125.6.2.1 - rds: Fix lack of reentrancy for connection reset with dst addr zero Haakon Bugge Orabug: 35713695 CVE-2023-22024...
Unbreakable Enterprise kernel security update
4.14.35-2047.529.3.1 - rds: Fix lack of reentrancy for connection reset with dst addr zero Haakon Bugge Orabug: 35708852 CVE-2023-22024...
Unbreakable Enterprise kernel-container security update
5.4.17-2136.323.8.1.el8 - rds: Fix lack of reentrancy for connection reset with dst addr zero Haakon Bugge Orabug: 35713696 CVE-2023-22024...
SUSE CVE-2004-0790
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service reset TCP connections via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks;...
PT-2022-6979 · Oracle · Unbreakable Enterprise Kernel
Name of the Vulnerable Software and Affected Versions: Unbreakable Enterprise Kernel UEK affected versions not specified Description: The issue is related to the RDS module in the Unbreakable Enterprise Kernel UEK, which has two setsockopt2 options, RDS CONN RESET and RDS6 CONN RESET, that are no...
Addition of new httpprofile parameter “allowOnlyWordCharactersAndHyphen”
The Citrix ADC appliance can now allow only word characters A-Za-z0-9 and hyphen - in the http request/response header names and if the request/response has any other characters in the header names the connection will be reset...
Denial Of Service (DoS)
IBM MQ is vulnerable to denial of service. An attacker is able to exploit the vulnerability by resetting a client connection via an error within the Data Conversion routine...
CVE-2020-27713
In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel TMM leaks memory...
CVE-2020-27713
In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel TMM leaks memory...
cPanel Input Validation Error Vulnerability (CNVD-2019-26370)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 78.0.2. The vulnerability stems from a web-based...
ALPINE-CVE-2018-10915
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side...
kernel: Use after free in tcp_xmit_retransmit_queue
A use-after-free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. This condition could allow an attacker to send an incorrect selective acknowledgment to existing connections, possibly resetting a connection...
kernel: Use after free in tcp_xmit_retransmit_queue
A use-after-free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. This condition could allow an attacker to send an incorrect selective acknowledgment to existing connections, possibly resetting a connection...
kernel: Use after free in tcp_xmit_retransmit_queue
A use-after-free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. This condition could allow an attacker to send an incorrect selective acknowledgment to existing connections, possibly resetting a connection...
kernel: Use after free in tcp_xmit_retransmit_queue
A use-after-free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. This condition could allow an attacker to send an incorrect selective acknowledgment to existing connections, possibly resetting a connection...
Multiple Vendor ICMP Implementation Malformed Path MTU DoS
No description provided by source. source: http://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions...
Multiple Vendor ICMP Message Handling DoS
No description provided by source. source: http://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions...
MySQL Server COM_CHANGE_USER Command Security Bypass
The installed version of MySQL may be affected by a security bypass vulnerability because the salt used during password validation does not change when switching users with the 'COMCHANGEUSER' command. Additionally, the connection is not reset when invalid credentials are submitted. Normally, whe...
afd
This plugin sends custom requests to the remote web server in order to verify if the remote network is protected by an IPS or WAF. afd plugin detects both TCP-Connection-reset and HTTP level filters, the first one usually implemented by IPS devices is easy to verify: if afd requests the custom pa...
Multiple Vendor ICMP Connection Reset Denial of Service - High Confidence (CVE-2004-0790)
There exists a vulnerability in multiple vendor's TCP/IP and Internet Control Message Protocol ICMP implementations. A spoofed ICMP message containing crafted fields can force the vulnerable system to reset TCP connection. A remote attacker can exploit this vulnerability to interrupt services or...