CVE-2011-1935

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets...

Microsoft Windows Server Message Block Server Information Disclosure Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. The Server Message Block SMB Server is one of the components that provides authentication for computers to access printers and file systems on the server. An information disclosure vulnerability exist...

Updated dnsmasq packages fix security vulnerabilities

CVE-2017-13704: Dnsmasq could be made to crash on a large DNS query. A DNS query received by UDP which exceeds 512 bytes or the EDNS0 packet size, if different. is enough to cause SIGSEGV. CVE-2017-14491: A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies...

Updated dnsmasq packages fix security vulnerabilities

An audit by mozilla security found several vulnerability and potential vulnerability in dnsmasq: - Uninitialized buffer leads to memory leakage - Allocated memory is not cleared - Unchecked return value can lead to NULL pointer dereference - Hardcoded values in fscanf format strings with...

DNSmasq Denial of Service Vulnerability (CNVD-2017-29274)

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. A denial of service vulnerability in DNSmasq 2.77 and prior versions allows remote attackers to consume excessive memory on the target system by sendi...

DNSmasq Arbitrary Code Execution Vulnerability

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. An arbitrary code execution vulnerability exists in DNSmasq 2.77 and earlier versions, which allows remote attackers to trigger a heap overflow and...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

CVE-2017-12233

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

CVE-2017-12234

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

CVE-2017-12233

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

Cisco IOS Software Common Industrial Protocol Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS, which arises from the program's failure to properly parse specially crafted CIP packets. A remote...

Security Advisory - Several Vulnerabilities in H323 protocol of Huawei Products

There are two out-of-bounds read vulnerabilities in H323 protocol of Huawei products. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot. Vulnerability ID:...

PT-2017-2992 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.4 through 15.6 Description: The issue is due to insufficient input validation when handling CIP packets, allowing a remote attacker to cause a device reload and denial of service DoS using a specially crafted CIP packet...

Linux Kernel NFSv4 nfsd PNFS denial of Service (CVE-2017-8797)

A denial of service vulnerability exists in the NFSv4 component of the Linux Kernel. The vulnerability is due to improper handling of the pNFS LAYOUTGET and GETDEVICEINFO commands. A remote attacker can exploit this vulnerability by sending maliciously crafted packets to a vulnerable system...

[ASA-201709-5] tcpdump: multiple issues

Arch Linux Security Advisory ASA-201709-5 ========================================= Severity: Critical Date : 2017-09-13 CVE-ID : CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900...