494 matches found
PT-2021-3860
Name of the Vulnerable Software and Affected Versions HCC Nichestack version 3.0 Description The issue is related to the implementation of the TCP/IP stack in HCC Nichestack, specifically with the generation of Initial Sequence Numbers ISNs for TCP connections. The code derives the ISN from an...
CMX-TCP/IP Stack - FTP Detection
Binary data cmxtcpipstackftpdetect.nbin...
NetX TCP/IP Stack - HTTP Detection
Binary data netxtcpipstackhttpdetect.nbin...
lwIP TCP/IP Stack - HTTP Detection
Binary data lwiptcpipstackhttpdetect.nbin...
uIP/Contiki TCP/IP Stack - HTTP Detection
Binary data uipcontikitcpipstackhttpdetect.nbin...
FNET TCP/IP Stack - HTTP Detection
Binary data fnettcpipstackhttpdetect.nbin...
Informational: Impact of the NAME:WRECK DNS vulnerabilities
The Palo Alto Networks Product Security Assurance team evaluated the NAME:WRECK DNS vulnerabilities impacting multiple TCP/IP software stack implementations. PAN-OS software and Prisma SD-WAN CloudGenix devices do not utilize the IPNet, Nucleus NET, FreeBSD, or NetX TCP/IP software stacks related...
EulerOS 2.0 SP5 : iscsi-initiator-utils (EulerOS-SA-2021-1683)
According to the versions of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when...
Vulnerabilities fixed in NetBSD
The developers of NetBSD have fixed a number of vulnerabilities fixed in NetBSD's IP stack. Because packet IDs are not randomly are not randomly generated by default, a malicious party can predict the IP traffic. predict, allowing the malicious party to launch a man-in-the-middle attack to obtain...
EulerOS Virtualization 3.0.2.6 : iscsi-initiator-utils (EulerOS-SA-2021-1437)
According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TC...
Huawei EulerOS: Security Advisory for iscsi-initiator-utils (EulerOS-SA-2021-1377)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2021-1076)
According to the versions of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when...
Huawei EulerOS: Security Advisory for iscsi-initiator-utils (EulerOS-SA-2021-1076)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1012)
According to the versions of the open-iscsi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is...
EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1031)
According to the versions of the open-iscsi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is...
Denial Of Service (DoS)
open-iscsi is vulnerable to denial of service DoS. The vulnerability exists through an Out-of-Bounds read in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upperlayerchksum in net/ipv4/uip.c...
New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices
The US Cybersecurity Infrastructure and Security Agency CISA has warned of critical vulnerabilities in a low-level TCP/IP software library developed by Treck that, if weaponized, could allow remote attackers to run arbitrary commands and mount denial-of-service DoS attacks. The four flaws affect...
Ripple20 Treck TCP/IP Stack Vulnerabilities
Treck IP stack implementations for embedded systems are affected by multiple vulnerabilities. This set of vulnerabilities was researched and reported by JSOF, who calls them Ripple20. A summary of JSOF’s research is here, along with a technical whitepaper. See the Rapid7 Analysis tab for further...
Treck TCP/IP stack denial of service vulnerability
Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. A denial of service vulnerability exists in Treck TCP/IP stack version 6.0.1.67 and prior versions, which stems from a vulnerability in the Treck HTTP...
Contiki infinite loop vulnerability (CNVD-2021-29450)
Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. An infinite loop vulnerability exists in the processing of IPv6 extended headers in exthdroptionsprocess in net/ipv6/uip6.c in the uIP TCP/IP stack component in Contiki 3.0 and...