kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic

A NULL pointer dereference flaw was found in the SCTP implementation. A local user could use this flaw to cause a denial of service on the system by triggering a kernel panic when creating multiple sockets in parallel while the system did not have the SCTP module loaded...

wireshark: NCP dissector crashes (wnpa-sec-2014-22)

The buildexpertdata function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2015-07404)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. There is a security vulnerability in the Cisco AsyncOS f network stack. a remote attacker sends a large number of TCP packets that consume system memory and perform a...

USN-2797-1 linux-lts-utopic vulnerabilities

It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route advertisement with an invalid MTU that a user space daemon like NetworkManager would honor and apply to the kernel, causing a denial of service...

Cisco TelePresence Server DoS

Conference Control Protocol API buffer overflow...

CVE-2015-6284

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...

Apple iOS xnu TCP Message Header Checksum Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in the Apple iOS XNU TCP message header checksum allows an attacker to conduct a denial-of-service attack on a targeted TCP link without knowing the correct sequence number...

CVE-2015-6284: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...

Cisco TelePresence Server Software API Buffer Overflow Vulnerability

Cisco TelePresence Server Software is a videoconferencing solution known as a "telepresence" system. The program provides audio, video space and other components to provide remote participants with a "face-to-face" virtual meeting room effect. A buffer overflow vulnerability exists in the...

Cisco TelePresence Server Denial of Service Vulnerability

Cisco TelePresence Server contains a buffer overflow vulnerability in the Conference Control Protocol API that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Cisco has released software updates that address this vulnerability. No workarounds that...

kernel: SCTP race condition allows list corruption and panic from userlevel

A race condition flaw was found in the way the Linux kernel's SCTP implementation handled Address Configuration lists when performing Address Configuration Change ASCONF. A local attacker could use this flaw to crash the system via a race condition triggered by setting certain ASCONF options on a...

USN-2717-1 linux-lts-utopic vulnerability

Marcelo Ricardo Leitner discovered a race condition in the Linux kernel's SCTP address configuration lists when using Address Configuration Change ASCONF options on a socket. An unprivileged local user could exploit this flaw to cause a denial of service system crash...

The vulnerability of the Business Process Manager operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LPTS operating system’s Business Process Manager implementation is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by continuously sending specially crafted packets to TCP and UDP ports...

Juniper Pulse Secure TCP Hardware Acceleration User Data Access Vulnerability

Juniper Networks' Secure Access is an enterprise-grade SSL VPN access device, and the operating system running on the device is Juniper IVE OS. A security vulnerability in Juniper Pulse Secure TCP Hardware Acceleration allows remote users to exploit a TCP handshake checksum vulnerability which, i...

wireshark: NCP dissector crashes (wnpa-sec-2014-22)

The buildexpertdata function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Juniper Junos LAST_ACK State Transition Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability exists in Juniper Junos that allows a remote user to create a TCP connection to a target device, change the link to LASTACK when the target background program has...

Cisco ASR 5000 Series Router GGSN TCP/IP Processing Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability in the processing of TCP messages in the GPRS Support Node GGSN of the Cisco ASR 50000 Series router gateway allows remote attackers to...

Wind River VXWorks TCP Predictable Vulnerability

VxWorks is a real-time operating system widely used on ICS-related devices. VxWorks software generates predictable initial TCP sequential numbers that can be predicted by an attacker based on previous values to spoof or interrupt TCP connections...

kernel: net: slab corruption from use after free on INIT collisions

A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system...

USN-2563-1 linux vulnerabilities

Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...