2257 matches found
ALPINE-CVE-2016-2181
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service false-positive packet drops via spoofed DTLS records, related to reclayerd1...
DEBIAN-CVE-2016-2181
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service false-positive packet drops via spoofed DTLS records, related to reclayerd1...
ALPINE-CVE-2016-2179
The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service memory consumption by maintaining many crafted DTLS sessions simultaneously, related to...
CVE-2016-1263
Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6, 15.1 before 15.1F2-S5, 15.1F4 before 15.1F4-S2, 15.1R before 15.1R2-S3, 15.1 before 15.1R3, and 15.1X49 before 15.1X49-D40 allow...
USN-3070-4 linux-lts-xenial vulnerabilities
USN-3070-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. A missing permission check when settings ACLs was discovered in nfsd. A local user cou...
Ubuntu: Security Advisory (USN-3071-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Stack Buffer Overflow Vulnerability in Legba Incorporated YateBTS
Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A stack buffer overflow vulnerability exists in Legba Incorporated YateBTS. An attacker could exploit the vulnerability by sending an oversized UDP packet resulting in a memory buffer overflow, which in turn could...
Stack Buffer Overflow Vulnerability in OsmoCOM Osmo-TRX/Osmo-BTS
Osmocom is a series of projects on open source mobile communications, including software tools for GSM, DECT, TETRA and other mobile communication standards. A stack buffer overflow vulnerability exists in OsmoCOM Osmo-TRX/Osmo-BTS. An attacker could exploit the vulnerability by sending an...
CVE-2016-2179
It was discovered that the Datagram TLS DTLS implementation could fail to release memory in certain cases. A malicious DTLS client could cause a DTLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory...
Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)
Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...
Microprogramming software for Siemens SIPROTEC 4 relay protection microprocessors
The vulnerability of the software of the Siemens SIPROTEC 4 relay protection micro-processor terminal allows a remote attacker to cause a malfunction of the micro-processor terminal by sending a specially crafted UDP packet to port 50000. This causes the micro-processor terminal to cease...
OpenSSL Compromise Information Disclosure
A memory leak in d1both.c during the implementation of DTLS for OpenSSL allows malicious actors operating remotely to trigger a service failure excessive memory consumption by using empty DTLS fragments, which cause incorrect processing of return values from the insertion function...
OpenSSL Data Compromise
The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...
Samba Compromise Information Disclosure
The vulnerability in the sysrecvfrom function of nmbd in Samba allows malicious actors operating remotely to cause service interruptions lockup and excessive processor resource consumption by using improperly formed UDP packets...
Cisco IPS DoS
The vulnerability in the dtls1getmessagefragment function in d1both.c of OpenSSL allows malicious actors to induce a service failure recursion and abnormal client termination by using the DTLS hello message in an invalid manner...
Cisco Unified Communications Manager Code Execution
The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...
OpenSSL Compromise Information Disclosure
Double liberation in d1both.c, within the implementation of DTLS for OpenSSL, allows malicious actors operating remotely to cause service failure abrupt termination of the application by using specially crafted DTLS packets that trigger errors...
Cisco IOS Disconnection
Cisco IOS software contains a vulnerability in the Resource Reservation Protocol RSVP, which allows a malicious attacker to trigger a “service failure” by sending specially crafted UDP RSVP packets...
Linux DoS
Improper processing of IPv6 sockets using the UDPCORK option in the udpv6pushpendingframes function can lead to service failures...
Cisco IOS DoS
Cisco IOS software contains a vulnerability in the Internet Key Exchange IKE protocol. This vulnerability allows a malicious attacker to send specially crafted IKE packets to any of the UDP ports 500, 848, 4500, or 4848. This causes the router to restart and trigger a “service failure”...