Snort Inline模式碎片重组拒绝服务漏洞

Snort是广泛部署的开放源码网络入侵检测系统（IDS）。很多其他IDS产品中也使用了Snort及其组件。 Snort Inline在处理畸形的碎片报文时存在漏洞，远程攻击者可能利用此漏洞导致Snort崩溃。 如果在Linux平台上以Inline模式运行Snort的话，且启用了Frag3同时禁用了ipconntrack，则如果向Snort发送了特制的碎片报文的话就会导致拒绝服务。 Snort Project Snort 2.7.0 beta 1 Snort Project Snort 2.6.1.2 Snort Project Snort 2.6.1.1...

CVE-2003-0364

CVE-2003-0364 affects the Linux kernel 2.4 series: TCP/IP fragment reassembly handling can be abused by crafted packets to trigger high CPU usage via hash table collisions, leading to a denial of service. Debians OpenVAS entries reference kernel updates (e.g., kernel-patch-2.4.18-powerpc, kernel-...

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, the router crashes. The router must be power cycled to...

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, th...

CVE-2000-0305

CVE-2000-0305 describes a remote DoS in Windows 95/98/2000/NT4/Terminal Server caused by sending large numbers of identical fragmented IP packets (the jolt2/IP Fragment Reassembly issue). The vulnerability arises from IP fragment processing and has been associated with Microsoft hotfix MS00-029 (...

MS00-029: NT IP Fragment Reassembly Patch Not Applied (jolt2) (259728)

The hotfix for the 'IP Fragment Reassembly' vulnerability has not been applied on the remote Windows host. This vulnerability allows an attacker to send malformed packets, which will utilize 100% of the computer CPU, making it nearly unusable for the legitimate users. C Tenable Network Security,...

CVE-2000-0305

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...

D-Link DI-614+ - IP Fragment Reassembly Denial of Service

D-Link DI-614+ - IP Fragment Reassembly Denial of Service / source: https://www.securityfocus.com/bid/7219/info It has been reported that the implementation of the Internet Protocol IP in the firmware of the D-Link DI-614+ wireless router is vulnerable to a remotely exploitable denial of service...

D-Link DI-614+ - IP Fragment Reassembly Denial of Service

/ source: https://www.securityfocus.com/bid/7219/info It has been reported that the implementation of the Internet Protocol IP in the firmware of the D-Link DI-614+ wireless router is vulnerable to a remotely exploitable denial of service condition. The vulnerability is related to the reassembly ...