USN-4115-2 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2 regression

USN 4115-1 fixed vulnerabilities in the Linux 4.15 kernel for Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. Unfortunately, as part of the update, a regression was introduced that caused a kernel crash when handling fragmented packets in some situations. This update addresses the issue. We apologize for...

RHEL 6 : kernel (RHSA-2019:2695)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2695 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: hw: Spectre SWAPGS gadget vulnerability...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2019-6017 · Schneider Electric · Modicon Quantum 140 Noe771X1

Name of the Vulnerable Software and Affected Versions: Modicon Quantum 140 NOE771x1 versions 6.9 and earlier Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions, which could cause denial of service when the module receives an IP fragmented packet with a...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. This is because of the way Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted...

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information by using specially crafted fragmented IP...

Command injection

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

CVE-2018-15840

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

CVE-2018-15840

CVE-2018-15840 affects TP-Link TL-WR840N devices: a vulnerability in processing fragmented packets can be exploited remotely to cause a denial of service (network outage). Demonstrated by sending fragmented packets (e.g., with nmap -f). The provided connected documents corroborate a DoS impact vi...

CVE-2018-15840

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

CVE-2018-15840: Improper Restriction of Operations within the Bounds of a Memory Buffer

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

The vulnerability of the Linux operating system’s kernel, related to errors in processing fragmented IP packets, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors in processing fragmented IP packets. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially crafted IP packets...

CVE-2018-8493

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

CVE-2018-8493

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

CVE-2018-8493

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

CVE-2018-8493

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

PT-2018-2078 · Microsoft · Windows 10 Servers +6

Name of the Vulnerable Software and Affected Versions: Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description: An information disclosure issue exists due to the improper handling of fragmented IP packets by the Windows TCP/IP stack. This ca...

Important: qemu-kvm

Issue Overview: A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process...

Input validation

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...