CVE-2016-6509

epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-6510

Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

SOL14510263 - IPv6 Neighbor Discovery crafted packet vulnerability CVE-2016-1409

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

The vulnerability of the NetUSB driver, allowing a hacker to execute arbitrary code

The vulnerability in the runinitsbus function of the NetUSB driver is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted TCP packet, which contains a long computer name minimum 64 bytes...

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

The vulnerability exists in the srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark, due to an incorrect update of the SRTP dialog data. Exploiting this vulnerability allows malicious actors operating remotely to cause a service failure abrupt termination of ...

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

A vulnerability exists in the rlcdecodeli function in the epan/dissectors/packet-rlc.c file of the RLC dissector in Wireshark. This vulnerability arises due to the fact that certain structural elements are initialized only after they are actually used. Exploiting this vulnerability allows malicio...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

A bug in the Application Layer Gateway ALG module of the Cisco IOS operating system allows a remote attacker to reboot the device by using a specially crafted DNS packet with NAT enabled...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

A bug in the EnergyWise module of the Cisco IOS operating system, allowing a remote attacker to reboot the device using a specially crafted IP packet...

Memory corruption

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of servi...

AIX 7.1 TL 4 : bind (IV84458) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

CVE-2016-4817

lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly execute arbitrary code via a crafted packet...

CVE-2016-5234

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a...

CVE-2016-5234

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a...

Buffer overflow

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a...

CVE-2016-5234

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a...

CVE-2016-5353

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability (cisco-sa-20160525-ipv6)

A vulnerability in the IP Version 6 IPv6 packet processing functions of multiple Cisco products could allow an unauthenticated, remote attacker to cause an affected device to stop processing IPv6 traffic, leading to a denial of service DoS condition on the device. SPDX-FileCopyrightText: 2016...

Cisco NX-OS IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability (cisco-sa-20160525-ipv6)

A vulnerability in the IP Version 6 IPv6 packet processing functions of multiple Cisco products could allow an unauthenticated, remote attacker to cause an affected device to stop processing IPv6 traffic, leading to a denial of service DoS condition on the device. Copyright C 2016 Greenbone...

Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability (cisco-sa-20160525-ipv6)

A vulnerability in the IP Version 6 IPv6 packet processing functions of multiple Cisco products could allow an unauthenticated, remote attacker to cause an affected device to stop processing IPv6 traffic, leading to a denial of service DoS condition on the device. Copyright C 2016 Greenbone...

H2O use-after-free vulnerability

Overview H2O is an open source web server software. H2O contains a use-after-free vulnerability. Kazuho Oku reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Kazuho Oku coordinated under the Information Security Early Warning Partnership. Impact An...