Stack overflow

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when...

CVE-2020-1907

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when...

libsrtp: improper handling of CSRC count and extension header length in RTP header

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686...

Denial Of Service (DoS)

The kernel is vulnerable denial of service DoS.A flaw was found in the IPv6 Extension Header EH handling implementation in the Linux kernel. The skb-dst data structure was not properly validated in the ipv6hopjumbo function. This could possibly lead to a remote denial of service...

PT-2017-12421 · Cisco · Cisco Firepower System

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software versions 6.0 and later Description: A vulnerability in the detection engine parsing of IPv6 packets could allow an unauthenticated, remote attacker to cause high CPU utilization or a denial of service DoS...

Debian Security Advisory DSA 3539-1 (srtp - security update)

Randell Jesup and the Firefox team discovered that srtp, Cisco OpenVAS Vulnerability Test $Id: deb3539.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3539-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks...

Updated srtp packages fix security vulnerability

Srtp before 1.5.3 is vulnerable to a potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length CVE-2015-6360...

Debian DLA-393-1 : srtp security update

Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length. Credit goes to Randell Jesup and the Firefox team for reporting this issue. As there is no aead mode available in the Squeeze version, only srtpunprotect needed to be patched NOTE:...

DLA-393-1 srtp - security update

Bulletin has no description...

Cisco IOS XR IPv6 Extension Header DoS (cisco-sa-20150220-ipv6)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to improper processing of malformed IPv6 packets carrying extension headers. A remote attacker, using a specially crafted packet, can cause a reload of the line card, resulting in a denial of service condition...

DoS attacks (ICMPv6-based) resulting from IPv6 EH drops

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, Ten days ago or so we published this I-D: http://www.ietf.org/internet-drafts/draft-gont-v6ops-ipv6-ehs-in-real-world-00.txt Section 5.2 of the I-D discusses a possible attack vector based on a combination of "forged" ICMPv6 PTB messages and IP...

CVE-2012-1595

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

PT-2012-3367 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 1.4.x through 1.4.11 Wireshark versions 1.6.x through 1.6.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by providing a WTAP ENCAP ERF file...

CVE-2011-2059

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

targets-ipv6-multicast-invalid-dst NSE Script

Sends an ICMPv6 packet with an invalid extension header to the all-nodes link-local multicast address ff02::1 to discover some available hosts on the LAN. This works because some hosts will respond to this probe with an ICMPv6 Parameter Problem packet. Script Arguments newtargets If true, add...

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

The TCP/IP stack installed on the remote Windows host is affected by one or more of the following vulnerabilities : - An error exists in the Windows TCP/IP stack when processing specially crafted IPv6 packets with a malformed extension header that could cause the affected system to stop respondin...

PT-2010-3515 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 Description: A denial of service issue exists due to improper handling of malformed IPv6 packets by the TCP/IP stack...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5.2 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel...

kernel: ipv6_hop_jumbo remote system crash

The ipv6hopjumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a crafted IPv6 packet...

CVE-2007-3644

archivereadsupportformattar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service infinite loop via 1 an end-of-file condition within a pax extension header or 2 a malformed pax extension header in an a PAX or a b TAR archive...