Design/Logic Flaw

The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...

DEBIAN-CVE-2012-2744

net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via certain types of fragmented IPv6 packets...

CVE-2012-2744

net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via certain types of fragmented IPv6 packets...

CVE-2012-1342

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

CVE-2012-1342

Cisco Carrier Routing System (CRS) versions 3.9, 4.0, and 4.1 are affected by CVE-2012-1342. The issue arises from improper handling of IPv4 fragments (noninitial fragments) which allows remote, unauthenticated attackers to bypass ACL entries and reach restricted network segments. The vulnerabili...

CVE-2012-1342

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm()

net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via certain types of fragmented IPv6 packets...

CVE-2011-1927

The ipexpire function in net/ipv4/ipfragment.c in the Linux kernel before 2.6.39 does not properly construct ICMPTIMEEXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service invalid pointer dereference via crafted fragmented packets...

Null pointer dereference

The ipexpire function in net/ipv4/ipfragment.c in the Linux kernel before 2.6.39 does not properly construct ICMPTIMEEXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service invalid pointer dereference via crafted fragmented packets...

CVE-2011-1927

The ipexpire function in net/ipv4/ipfragment.c in the Linux kernel before 2.6.39 does not properly construct ICMPTIMEEXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service invalid pointer dereference via crafted fragmented packets...

CVE-2012-0043

Buffer overflow in the reassemblemessage function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a series of fragmented RLC...

DEBIAN-CVE-2012-0043

Buffer overflow in the reassemblemessage function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a series of fragmented RLC...

Buffer overflow

Buffer overflow in the reassemblemessage function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a series of fragmented RLC...

SuSE 11.1 Security Update : Xen and libvirt (SAT Patch Number 5796)

This collective update 2012/02 for Xen provides fixes for the following reports : Xen : - 740165: Fix heap overflow in e1000 device emulation applicable to Xen qemu - CVE-2012-0029 - 739585: Xen block-attach fails after repeated attach/detach - 727515: Fragmented packets hang network boot of HVM...

UBUNTU-CVE-2011-4326

The udp6ufofragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload UFO configuration is enabled, allows remote attackers to cause a denial of service system crash by sending fragmented IPv6 UDP packets to a bridge device...

CVE-2011-1927

The ipexpire function in net/ipv4/ipfragment.c in the Linux kernel before 2.6.39 does not properly construct ICMPTIMEEXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service invalid pointer dereference via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

DEBIAN-CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

Null pointer dereference

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...