2568 matches found
bind: An error in TSIG authentication can permit unauthorized zone transfers
A flaw was found in the way BIND handled TSIG authentication of AXFR requests. A remote attacker, able to communicate with an authoritative BIND server, could use this flaw to view the entire contents of a zone by sending a specially constructed request packet...
VulnCheck KEV: CVE-2009-2532
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka...
UBUNTU-CVE-2017-9359
The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...
CVE-2017-9359
The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...
CVE-2017-9359
Removed by vendor...
The vulnerability of the ANI service in the Cisco IOS operating system allows a hacker to trigger a service failure and a device restart.
The vulnerability of the Cisco IOS operating system’s ANI service is related to incomplete validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure using a specially crafted IPv6 packet...
Microsoft Windows SMB Server Information Disclosure Vulnerability (CNVD-2017-08205)
Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the Microsoft Server Message Block 1.0 SMBv1 server processing of certain requests. An attacker can exploit this vulnerability to obtain sensitive server information via a constructed...
Network Time Protocol Daemon peer xmit mode Denial of Service (CVE-2017-6464)
A denial of service vulnerability exists in the Network Time Protocol daemon NTPD. The vulnerability is due to a lack of input validation on the mode parameter in peerxmit when configuring ntp servers. A remote, authenticated attacker can exploit this vulnerability by sending a crafted packet to...
BSA-2017-257
Security Advisory ID : BSA-2017-257 Component : NTP Revision : 1.0: Interim It was discovered thatntpdas a client did not correctly check the originate timestamp in received packets. A remote attacker could use this flaw to send a crafted packet to anntpdclient that would effectively disable...
BSA-2017-224
Security Advisory ID : BSA-2017-224 Component : ntp Revision : 1.0: Interim Ifntpdis configured to allowmrulistquery requests from a server that sends a crafted malicious packet,ntpdwill crash on receipt of that crafted maliciousmrulistquery packet. Affected Products Brocade is investigating its...
CVE-2017-6608
A vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packets. An attacker could explo...
Cisco ASA Software SSL/TLS Denial of Service Vulnerability
A vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packets. An attacker could explo...
CVE-2016-10311
Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238...
Buffer overflow
Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service resource consumption and process crash by sending a crafted packet several times, aka SAP Security Note 2308778...
CVE-2016-10310
Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service resource consumption and process crash by sending a crafted packet several times, aka SAP Security Note 2308778...
Design/Logic Flaw
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this...
Cisco Firepower Detection Engine SSL Denial of Service Vulnerability
A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process consumes a high level of CPU resources. The vulnerability...
UBUNTU-CVE-2017-7401
Incorrect interaction of the parsepacket and parsepartsignsha256 functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service infinite loop of a collectd instance configured with "SecurityLevel None" and with empty "AuthFile" options via a crafted UDP...
DEBIAN-CVE-2017-7401
Incorrect interaction of the parsepacket and parsepartsignsha256 functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service infinite loop of a collectd instance configured with "SecurityLevel None" and with empty "AuthFile" options via a crafted UDP...