CVE-2014-2161

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

Code injection

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

Command injection

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45745...

CVE-2014-2161

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

Cisco Adaptive Security Appliance Software SIP Inspection Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP inspection engine code could allow an unauthenticated, remote attacker to cause a slow memory leak, which may cause instability on the affected system. The vulnerability is due to improper handling of SIP packets inspected by the Cisco Adapti...

CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Memory corruption

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Medium: kernel

Issue Overview: The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets. drivers/vhost/net.c in...

Juniper Junos OpenSSL Heartbeat Information Disclosure (JSA10623) (Heartbleed)

According to its self-reported version number, the remote Junos device is affected by an information disclosure vulnerability. An out-of-bounds read error, known as Heartbleed, exists in the TLS/DTLS implementation due to improper handling of TLS heartbeat extension packets. A remote attacker,...

CVE-2014-0077

drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...

Memory corruption

drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...

CVE-2014-0077

drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...

CVE-2014-0077

drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...

Illegal TCP Options

TCP packet options may contain illegal values. Attackers can use specially crafted TCP packets for remote network attacks...

CVE-2014-0160

The 1 TLS and 2 DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys,...

wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

wireshark: ActiveMQ OpenWire dissector large loop (wnpa-sec-2013-64)

The dissectopenwiretype function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service loop via a crafted packet...

wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49)

epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service loop via a crafted packet that is not properly handled by the GSM RR dissector...

wireshark: Multiple array index errors in the GSM A Common dissector (wnpa-sec-2013-50)

Multiple array index errors in epan/dissectors/packet-gsmacommon.c in the GSM A Common dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allow remote attackers to cause a denial of service application crash via a crafted packet...