UBUNTU-CVE-2017-15924

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the addserver, buildconfig, and constructcommandline functions...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30935)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets

A buffer over-read was found in the Open vSwitch OvS firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service DoS...

openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets

A buffer over-read was found in the Open vSwitch OvS firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service DoS...

log4j: Socket receiver deserialization vulnerability

It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...

log4j: Socket receiver deserialization vulnerability

It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...

log4j: Socket receiver deserialization vulnerability

It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...

BSA-2017-373

Security Advisory ID : BSA-2017-373 Component : NFSv4 Revision : 2.0: Interim The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is...

BSA-2017-353

Security Advisory ID : BSA-2017-353 Component : Linux Kernel Revision : 3.0: Interim The IPv6 DCCP implementation in the Linux kernel mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue t...

Virtuozzo 6 : kernel / kernel-abi-whitelists / kernel-debug / etc (VZLSA-2017-0293)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Virtuozzo 7 : kernel / kernel-abi-whitelists / kernel-debug / etc (VZLSA-2017-0294)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

[SECURITY] Fedora 24 Update: globus-io-11.9-1.fc24

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

UBUNTU-CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

DEBIAN-CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

Linux Privilege Escalation

The vulnerability of the dccprcvstateprocess function in the net/dccp/input.c file of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain superuser privileges by improperly managing the...

Cisco Virtualized Packet Core-Distributed Instance Denial of Service Vulnerability

Cisco Virtualized Packet Core VPC is the StarOS release by product. A security vulnerability in the ingress UDP packet processing function of Cisco Virtualized Packet CoreDistributed Instance VPCDI Software could allow an unauthenticated, remote attacker to cause a denial of service by overloadin...

Linux Kernel DCCP Heap Buffer Overflow DoS

The vulnerability of the dccpv6requestrecvsock function in the net/dccp/ipv6.c module of the Linux kernel is related to incorrect data processing. Exploiting this vulnerability could allow an attacker acting locally to cause service failures or other adverse effects due to system calls...

PT-2017-2222 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue is related to the dccp v6 request recv sock function in the net/dccp/ipv6.c file of the Linux kernel, which mishandles inheritance. This allows local users to cause a denial of...

Windows UDP Service DoS

The vulnerability of the UDP service in the Microsoft Windows operating system is related to insufficient data processing speed. Exploiting this vulnerability can allow a malicious actor to cause service failure and forced restarts of devices through specially crafted SIP messages...