Extreme Networks ExtremeWireless WiNG Heap Overflow Vulnerability (CNVD-2018-03321)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc.The WiNG Access Point AP is one of the... A heap overflow vulnerability exists in the MINT Media Independent Tunnel Protocol for WiNG APs in Extreme Networks ExtremeWireless WiNG version 5.x prior to...

Extreme Networks ExtremeWireless WiNG Heap Overflow Vulnerability (CNVD-2018-03320)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc.The WiNG Access Point AP is one of the... A heap overflow vulnerability exists in the MINT Media Independent Tunnel Protocol for WiNG APs in Extreme Networks ExtremeWireless WiNG version 5.x prior to...

Cisco Adaptive Security Appliance Remote Code Execution Vulnerability

Cisco 3000 Series Industrial Security Appliances ISR, etc. are security firewall appliances from Cisco, U.S.A. Adaptive Security Appliance ASA Software is a set of firewall software used in them. A remote code execution vulnerability exists in the Secure Sockets Layer SSL VPN feature of ASA...

Security Advisory - Two Vulnerabilities in MGCP Protocol of Some Huawei Products

There is an out-of-bounds read vulnerability in Media Gateway Control Protocol MGCP of some Huawei products. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may cause...

CVE-2018-0002

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

Updated heimdal packages fix security vulnerability

Michael Eder and Thomas Kittel discovered that Heimdal did not correctly handle ASN.1 data. This would allow an unauthenticated remote attacker to cause a denial of service crash of the KDC daemon by sending maliciously crafted packets CVE-2017-17439...

Wireshark 'epan/wslua/wslua_file.c' Denial of Service Vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed network packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A denial of service...

DEBIAN-CVE-2017-17935

The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually...

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually...

Design/Logic Flaw

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SIMATIC Compact Field Unit, SIMATIC ET200AL, SIMATIC ET200M...

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually...

Input validation

An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP the...

CVE-2017-15320

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

Security Advisory - IPv6 Out-of-bounds Read Vulnerability in Huawei Products

IPv6 has an out-of-bounds read vulnerability. An unauthenticated attacker may send crafted malformed IPv6 packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause device to reset.Vulnerability ID: HWPSIRT-2016-08018 This vulnerability has be...

Buffer overflow

The 1 i2pd before 2.17 and 2 kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated...

Haystack Arq for Mac helper app elevation of privilege vulnerability

Haystack Arq for Mac is a Mac-based file backup software from Haystack Software, USA. arqupdater and others are among the components. Mac-based Haystack Software Arq 5.10 before the 5.x version of several helper app has a security vulnerability. A local attacker can exploit the vulnerability to...

Multiple Siemens Products Denial of Service Vulnerabilities

Siemens SIMATIC S7-200 Smart is a programmable logic controller PLC for small and medium-sized automation systems.SIMATIC WinAC RTX 2010 incl is a suite of software controllers for automation solutions. A denial of service vulnerability exists in multiple Siemens products. A remote attacker could...

Security Advisory - Two Vulnerabilities in H323 protocol of Huawei Products

There is an out-of-bounds read vulnerability in H323 protocol of Huawei products. An unauthenticated, remote attacker may send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot. Vulnerability ID:...

Huawei Mate 10 and Mate 10 Pro Stack Overflow Vulnerability

Huawei Mate 10 and Mate 10 Pro are both smartphone products from Chinese company Huawei. baseband modules are one of the baseband modules. A stack overflow vulnerability exists in the baseband module in Huawei Mate 10 ALP-AL00 prior to 8.0.0.120 SP2C00 and Mate 10 Pro BLA-AL00 prior to 8.0.0.120...