CVE-2010-1562

CVE-2010-1562 affects Cisco PGW 2200 Softswitch SIP MGCP processing. The vulnerability, described in Cisco advisory cisco-sa-20100512-pgw and linked CVE CSCsj98521, allows remote attackers to cause a device crash (DoS) by sending malformed SIP/Contact headers. Affected software versions include C...

CVE-2010-0603

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...

CVE-2009-0628

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service memory consumption and device crash by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block TCB leak...

Design/Logic Flaw

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2009-0635

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2008-6395

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

Directory traversal

cgi-bin/welcome/VPNonly in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service device crash via a crafted query string, as demonstrated using directory traversal sequences...

Nokia N95 / Nokia E90 DoS

Device crashes on malformed JPEG parsing...

Code injection

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

[IBM Datapower XS40] Denial of Service

It appears it is possible to crash the IBM DataPower XS40 Security Gateway device by sending a simple random? string to it, over an established SSL-connection. The device reboots as a response to the input. Tested vulnerable firmware is 3.6.1.5 Issue fixed as tested in 3.6.1.12 Tested as follows...

CVE-2008-3798

Cisco IOS 12.4 allows remote attackers to cause a denial of service device crash via a normal, properly formed SSL packet that occurs during termination of an SSL session...

CVE-2008-3798

CVE-2008-3798 affects Cisco IOS 12.4 where processing an SSL packet during SSL session termination can cause a device crash (remote DoS). The vulnerability is triggered by valid SSL traffic, with no credentials required. Cisco’s advisory (CSCsj85065) and the Cisco SSL vulnerability note document ...

CVE-2008-2739

The SERVICE.DNS signature engine in the Intrusion Prevention System IPS in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service device crash or hang via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447...

Nokia e90 phone Wi-Fi DoS

Device crash on malformed Wi-Fi frame...

Nokia 6131 phones multiple security vulnerabilities

URI spoofing, device crash...

Cisco IOS ssh DoS

Multiple vulnerabilities leading to device crash...

Linksys SPA-2102 wireless IP phones DoS

Large ICMP packets cause device to crash...

PT-2008-2858 · D Link · D-Link Di-524

Name of the Vulnerable Software and Affected Versions: D-Link DI-524 router affected versions not specified Description: The issue is related to multiple buffer overflows in the web interface of the router. These buffer overflows can be triggered by a remote attacker sending a long username or an...

Design/Logic Flaw

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service memory exhaustion and device crash via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of...

CVE-2008-0729

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service memory exhaustion and device crash via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of...