14 matches found
EUVD-2013-5313
Malware in sbrugna...
EUVD-2020-12590
Malware in sbrugna...
EUVD-2023-34951
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2019-10155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the...
CVE-2013-5473
Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service memory consumption or device reload via malformed IKEv1 packets, aka Bug ID CSCtx66011...
CVE-2006-0718
The Internet Key Exchange version 1 IKEv1 implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service crash via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of...
CVE-2023-30570
pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28...
MGASA-2022-0030 Updated libreswan packages fix security vulnerability
Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. CVE-2022-23094...
MGASA-2020-0215 Updated libreswan packages fix security vulnerability
Updated libreswan packages fix security vulnerability: An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the...
CVE-2016-6381
CVE-2016-6381 affects Cisco IOS and IOS XE software's IKEv1 fragmentation handling. The issue allows unauthenticated, remote attackers to cause a denial of service by exhausting memory or triggering a device reload through specially crafted fragmented IKEv1 packets. Affected versions include IOS ...
CVE-2016-6381
Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service memory consumption or device reload via fragmented IKEv1 packets, aka Bug ID CSCuy47382...
CVE-2015-0760: Improper Input Validation
The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259...
Memory corruption
Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service memory consumption or device reload via malformed IKEv1 packets, aka Bug ID CSCtx66011...
CVE-2013-5473: Undefined Security Weakness
Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service memory consumption or device reload via malformed IKEv1 packets, aka Bug ID CSCtx66011...