704 matches found
[SECURITY] [DSA 3341-1] conntrack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3341-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3341-1] conntrack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3341-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2015 https://www.debian.org/security/faq -...
Debian DLA-295-1 : conntrack security update
'jann' discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. In the version found in Debian 6.0 'squeeze', this vulnerability only applies to ICMPv6. For the oldoldstable distribution...
DSA-3341-1 conntrack - security update
Bulletin has no description...
Debian Security Advisory DSA 3341-1 (conntrack - security update)
It was discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. OpenVAS Vulnerability Test $Id: deb3341.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3341-1 usin...
SUSE-SU-2015:1683-1 Security update for conntrack-tools
Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6 traffic and the corresponding kernel modules that track this traffic are not available. bsc942149, CVE-2015-6496...
DLA-295-1 conntrack - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3341-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES10 Security Update : kernel (SUSE-SU-2014:0536-1)
The SUSE Linux Enterprise Server 10 Service Pack 4 LTSS kernel has been updated to fix various security issues and several bugs. The following security issues have been addressed : CVE-2011-2492: The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data...
IPv6 toolkit
A security assessment and troubleshooting tool for the IPv6 protocols The SI6 Networks’ IPv6 toolkit is a set of IPv6 security/trouble-shoting tools, that can send arbitrary IPv6-based packets. IPv6 toolkit: List of Tools addr6: An IPv6 address analysis and manipulation tool. flow6: A tool to...
Mandriva Linux Security Advisory : squid (MDVSA-2015:103)
Updated squid packages fix security vulnerabilities : Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128. Matthew Daley discovered that Squid 3 did not properly...
Squid 3.x < 3.4.8 Multiple Vulnerabilities
Binary data 8634.prm...
Squid 3.x < 3.4.8 Multiple Vulnerabilities
According to its banner, the version of Squid running on the remote host is 3.x prior to 3.4.8. Therefore, it may be affected by the following vulnerabilities : - A off-by-one overflow flaw exists within the SNMP processing component. By using a specially crafted UDP SNMP request, a remote attack...
Amazon Linux AMI : kernel (ALAS-2014-328)
The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets. drivers/vhost/net.c in the Linux kernel...
IPv6 DoS
Forget ICMPv6 PTB can break communication between two hosts...
DoS attacks (ICMPv6-based) resulting from IPv6 EH drops
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, Ten days ago or so we published this I-D: http://www.ietf.org/internet-drafts/draft-gont-v6ops-ipv6-ehs-in-real-world-00.txt Section 5.2 of the I-D discusses a possible attack vector based on a combination of "forged" ICMPv6 PTB messages and IP...
openSUSE Security Update : kernel (openSUSE-SU-2014:0957-1)
The Linux Kernel was updated to fix various bugs and security issues. CVE-2014-4699: The Linux kernel on Intel processors did not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allowed local users to leverage a...
OpenBSD - ICMPv6 Fragment Remote Execution Exploit PoC
No description provided by source. The PoC executes the shellcode int 3 and returns. It overwrites the extfree function pointer on the mbuf and forces a mfreem on the overflowed packet. The Impacket library is used to craft and send packets http://oss.coresecurity.com/projects/impacket.html or...
Microsoft Windows VISTA/2008 ICMPv6 Router Advertisement Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38061/info Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks...
OpenBSD 3.x/4.x - ICMPv6 Packet Handling Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22901/info OpenBSD is prone to a remote buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. A remote attacker can exploit this...