947 matches found
Buffer overflow vulnerability in CFM function in multiple Huawei products
CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800, CloudEngine 12800 are Huawei switch devices. A buffer overflow vulnerability exists in the CFM Connectivity Fault Management feature in multiple Huawei products. When the device uses CFM and is configured with MEP Maintenance...
Design/Logic Flaw
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...
Authentication flaw
The msasl module in InspIRCd before 2.0.23, when used with a service that supports SASLEXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message...
USN-3073-1 thunderbird vulnerabilities
Christian Holler, Carsten Book, Gary Kwong, Jesse Ruderman, Andrew McCreight, and Phil Ringnalda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via...
mongodb: DoS due to improper BSON validation
A flaw was found in the way MongoDB processed certain BSON-serialized UTF-8 strings. A remote, unauthenticated attacker could use this flaw to crash a mongod server via a specially crafted BSON message...
Intel Graphics Kernel Mode Driver Communication Function Local Elevation of Privilege Vulnerability
Intel Graphics Kernel Mode Driver is an integrated graphics kernel driver product from Intel Corporation USA. A security vulnerability exists in the communication feature of the Intel Graphics Kernel Mode Driver. An attacker could exploit the vulnerability by sending a specially crafted message t...
Pidgin DoS
The Pidgin software contains a vulnerability in its component designed to work with the IRC protocol. Exploiting this vulnerability allows a malicious actor to induce a service failure by sending a specially crafted message...
Spoofing
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message...
Updated dhcpcd packages fix security vulnerability
The printoption function in dhcp-common.c in dhcpcd through 6.10.2 misinterprets the return value of the snprintf function, which allows remote DHCP servers to execute arbitrary code or cause a denial of service memory corruption via a crafted message CVE-2014-7913. The dhcpcd package has been...
USN-2973-1 thunderbird vulnerabilities
Christian Holler, Tyson Smith, and Phil Ringalda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code...
Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability
A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 relay messages. An attacker could exploit this...
Cisco IOS Software DHCPv6 Relay Denial of Service Vulnerability (cisco-sa-20160323-dhcpv6)
A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
IBM DB2 LUW Denial of Service Vulnerability
IBM DB2 LUW is a set of U.S. IBM's relational database management system running in the LUW Linux, UNIX and Windows platform. A security vulnerability exists in IBM DB2 LUW. A remote attacker can exploit this vulnerability to cause a denial of service abnormal termination with the help of a...
Huawei AR3200 Device Input Checksum Vulnerability
The AR3200 series enterprise router is a new-generation network product launched by Huawei. It adheres to Huawei's profound accumulation in the fields of data communications, wireless communications, PON access, and softswitching, and relies on the independent intellectual property rights of the...
iOS Information Disclosure
The vulnerability of the Messages component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially crafted SMS message with a URL address...
Apple Graphics Kernel Driver Elevation of Privilege Vulnerability
Apple OS X is the operating system used by the Apple family of devices. An elevation of privilege vulnerability exists in the Apple Intel HD 3000 graphics kernel driver, which can be exploited by an attacker to cause a local elevation of privilege via a specially crafted message...
CVE-2016-0801
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted wireless control message packets, aka internal bug 25662029...
dhcpcd -- remote code execution/denial of service
MITRE reports: The printoption function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinterprets the return value of the snprintf function, which allows remote DHCP servers to execute arbitrary code or cause a denial of...
OpenSSL DoS Vulnerability (20151203) - Windows
OpenSSL is prone to a Denial of Service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
