Атака - получение фрагментов памяти через ICMP

При передаче фрагментированного пакета с маленьким TTL сервер отвечает пакетом полной длины, в котором "недостающее" место занято информацией из оперативной памяти...

Snort 1.8.3 - ICMP Denial of Service

Snort 1.8.3 - ICMP Denial of Service source: https://www.securityfocus.com/bid/3849/info Snort is a network intrusion detection system IDS. It is originally written for Linux and Unix systems, although it has also been ported to run under Microsoft Windows. Snort is capable of flexible and powerf...

Snort 1.8.3 - ICMP Denial of Service

source: https://www.securityfocus.com/bid/3849/info Snort is a network intrusion detection system IDS. It is originally written for Linux and Unix systems, although it has also been ported to run under Microsoft Windows. Snort is capable of flexible and powerful content analysis of network traffi...

CVE-2001-0861

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service CPU consumption by flooding the router with traffic that generates a large number of ICMP Unreachable replies...

Многочисленные проблемы в Cisco 12000 (DoS, protection bypass)

Многочисленные проблемы в реализации IP-фильтрации, большое количество ICMP Unreachable приводит к снижению производительности...

Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series Internet Router Revision 1.0 For Public Release 2001 November 14 08:00 UTC -0800 Summary The performance of Cisco 12000 series routers can be degraded when they have to send a large...

ICMP Unreachable Vulnerability in Cisco 12000 Series Internet Router

...

CVE-2001-0754

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY ping packets, which cause it to enter ROMMON mode and stop forwarding packets...

CVE-2001-0752

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST ping with the IP Record Route option set...

CVE-1999-1254

Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.

CVE-1999-1228

CVE-1999-1228 concerns various modems that do not implement a guard time or use a 0 guard time, enabling remote attackers to execute commands (e.g., ATH, ATH0) via a "+++" sequence embedded in ICMP packets, email subject lines, IRC, and more. Connected sources provide concrete details: exploitati...

CVE-1999-1563

Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm...

CVE-1999-1254

Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables...

CVE-1999-1563

CVE-1999-1563 concerns Nachuatec D435 and D445 printers, where remote attackers can cause a denial-of-service through an ICMP redirect storm. The available documents only state the affected device and the general impact (DoS via ICMP redirects); no concrete root‑cause, vulnerable subcomponent, ex...

Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests.

Overview Cayman gateways vulnerable to a denial of service via oversized ICMP echo ping requests. Installing the newest version of the vendor software will resolve this vulnerability. Description Cayman gateways running versions 5.5 Build R0, 5.3 Build R2, 5.3 Build R1 are vulnerable to an...

CVE-2001-0592

Watchguard Firebox II prior to 4.6 is affected. Remote attacker can induce a kernel denial of service by sending a large stream (>10,000) of malformed ICMP or TCP packets. No exploit details are provided in the connected documents. No remediation details are specified in the available sources.

CVE-2001-0411

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet...

CVE-2001-0323

The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...

CVE-2001-0411

CVE-2001-0411 affects Reliant Unix 5.44 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending an ICMP port unreachable packet, causing Reliant to drop all connections to the packet’s source address. Available records indicate a network-remote impact with p...

CVE-2001-0411

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet...