Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-36853)

Siemens SIMATIC CFU PA and others are products of Siemens, Germany.Siemens SIMATIC CFU PA is a compact field device.SIMATIC ET 200AL is a distributed I/O system module.SIMATIC ET 200M is a control cabinet for high-density channel applications. modular I/O system module. A denial of service...

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition...

PT-2019-3316 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG could allow an unauthenticated, remote attacker to cause a...

The vulnerability of the UDPmessageSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a attacker to cause service interruptions.

The vulnerability of the UDPmessageSetting component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file...

CVE-2019-10937

A vulnerability has been identified in SIMATIC TDC CP51M1 All versions V1.1.7. An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerabili...

Siemens SIMATIC TDC CP51M1 Input Validation Error Vulnerability

The Siemens SIMATIC TDC CP51M1 is an industrial Ethernet communication module for the SIMATIC TDC automation system from Siemens, Germany. An input validation error vulnerability exists in Siemens SIMATIC TDC CP51M1 versions prior to 1.1.7. An attacker could exploit this vulnerability by sending...

UBUNTU-CVE-2019-14199

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a netprocessreceivedpacket integer underflow during an udppackethandler call...

DEBIAN-CVE-2019-10638

In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols e.g., UDP and ICMP. When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions of indices to the counter...

Fuji Electric V-Server Input Validation Error Vulnerability

Fuji Electric V-Server is a suite of software for collecting and managing real-time field data from Fuji Electric Japan. An input validation error vulnerability exists in Fuji Electric V-Server versions prior to 6.0.33.0. The vulnerability originates from a network system or product that does not...

The vulnerability of the PIM protocol implementation in the Cisco IOS XR operating system allows a attacker to trigger a service failure.

The vulnerability of the Protocol Independent Multicast PIM implementation in the Cisco IOS XR operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted packets to port UDP 49...

CVE-2019-11683

udpgroreceivesegment in net/ipv4/udpoffload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service slab-out-of-bounds memory corruption or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka t...

UBUNTU-CVE-2019-11683

udpgroreceivesegment in net/ipv4/udpoffload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service slab-out-of-bounds memory corruption or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka t...

CVE-2019-10309

Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients...

CVE-2018-19016

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected...

McAfee Agent Denial of Service Vulnerability

The McAfee Agent is a distributed component of McAfee ePolicy Orchestrator McAfee ePO that downloads and enforces policies, performs client-side tasks such as deployments and updates, and also uploads events and provides other data about the status of each system. A denial of service vulnerabilit...

The vulnerability of the UDP protocol implementation in the IoT Field Network Director software for network management allows a attacker to cause a service failure.

The vulnerability of the UDP protocol implementation in the IoT Field Network Director software for network management involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Cisco IoT Field Network Director Resource Management Error Vulnerability

Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. A resource management error vulnerability exists in Cisco IoT Field Network Director. An attacker can exploit this vulnerabilit...

CVE-2019-1644

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service DoS condition. The vulnerability is due to improper resource management for UDP ingress...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Yi Home Camera Denial of Service Vulnerability (CNVD-2018-22815)

Yi Home Camera is an IoT home camera sold worldwide. A denial of service vulnerability exists in the UDP networking functionality of Yi Home Camera 27US 1.8.7.0D. An attacker can exploit the vulnerability by sending a specially crafted set of UDP packets to cause a denial of service...