Lucene search
+L

2824 matches found

CNVD
CNVD
added 2018/04/09 12:0 a.m.4 views

FreeBSD Denial of Service Vulnerability (CNVD-2018-07703)

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A security vulnerability exists in FreeBSD that stems from the length field of the ipsec...

7.8CVSS6.8AI score0.04377EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/04/06 12:0 a.m.32 views

FreeBSD : FreeBSD -- ipsec crash or denial of service (c0c5afef-38db-11e8-8b7f-a4badb2f469b)

The length field of the option header does not count the size of the option header itself. This causes a problem when the length is zero, the count is then incremented by zero, which causes an infinite loop. In addition there are pointer/offset mistakes in the handling of IPv4 options. Impact : A...

7.8CVSS7.3AI score0.04377EPSS
SaveExploits0References2
NVD
NVD
added 2018/04/04 2:29 p.m.16 views

CVE-2018-6918

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able ...

7.8CVSS7.5AI score0.04377EPSS
SaveExploits0References7
OSV
OSV
added 2018/04/04 2:29 p.m.9 views

CVE-2018-6918

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able ...

7.5CVSS6.8AI score0.04377EPSS
SaveExploits0References7
Prion
Prion
added 2018/04/04 2:29 p.m.19 views

Code injection

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able ...

7.8CVSS7.4AI score0.04377EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2018/04/04 2:0 p.m.80 views

CVE-2018-6918

CVE-2018-6918 affects FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8, and 10.3-RELEASE-p28. The/ipsec option header length field does not count the header size, causing an infinite loop when the length is zero. This can allow a remote attacker sending arbitrary packets ...

7.8CVSS7.5AI score0.04377EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2018/04/04 2:0 p.m.43 views

CVE-2018-6918

Removed by vendor...

7.8CVSS7.6AI score0.04377EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2018/04/04 12:0 a.m.36 views

FreeBSD -- ipsec crash or denial of service

Problem Description: The length field of the option header does not count the size of the option header itself. This causes a problem when the length is zero, the count is then incremented by zero, which causes an infinite loop. In addition there are pointer/offset mistakes in the handling of IPv...

7.8CVSS7.6AI score0.04377EPSS
SaveExploits0
FreeBSD Advisory
FreeBSD Advisory
added 2018/04/04 12:0 a.m.18 views

FreeBSD-SA-18:05.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-18:05.ipsec Security Advisory The FreeBSD Project Topic: ipsec crash or denial of service Category: core Module: ipsec Announced: 2018-04-04 Credits: Maxime...

7.8CVSS7.3AI score0.04377EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/03/15 12:0 a.m.31 views

FreeBSD : FreeBSD -- ipsec validation and use-after-free (dca7ced0-2796-11e8-95ec-a4badb2f4699)

Due to a lack of strict checking, an attacker from a trusted host can send a specially constructed IP packet that may lead to a system crash. Additionally, a use-after-free vulnerability in the AH handling code could cause unpredictable results. Impact : Access to out of bounds or freed mbuf data...

9.8CVSS8.3AI score0.02126EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/03/15 12:0 a.m.47 views

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180313) (Meltdown) (Spectre)

Security Fixes : - hw: cpu: speculative execution branch target injection s390-only CVE-2017-5715, Important - hw: cpu: speculative execution bounds-check bypass s390 and powerpc CVE-2017-5753, Important - hw: cpu: speculative execution permission faults handling powerpc-only CVE-2017-5754 Bug...

5.6CVSS7.6AI score0.92621EPSS
SaveExploits14References4
OpenVAS
OpenVAS
added 2018/03/15 12:0 a.m.69 views

CentOS Update for kernel CESA-2018:0512 centos6

Check the version of kernel SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882855";...

5.6CVSS7.3AI score0.92621EPSS
SaveExploits14References2
Tenable Nessus
Tenable Nessus
added 2018/03/15 12:0 a.m.278 views

CentOS 6 : kernel (CESA-2018:0512) (Meltdown) (Spectre)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

5.6CVSS7.6AI score0.92621EPSS
SaveExploits14References4
RedHat Linux
RedHat Linux
added 2018/03/13 6:38 p.m.128 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

5.6CVSS7.3AI score0.92621EPSS
SaveExploits14References4
OSV
OSV
added 2018/03/09 3:29 p.m.13 views

CVE-2018-6916

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system...

9.8CVSS6.6AI score0.02126EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/09 3:29 p.m.15 views

Double free

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system...

9CVSS9.2AI score0.02126EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2018/03/09 3:29 p.m.18 views

CVE-2018-6916

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system...

9.8CVSS9.3AI score0.02126EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/03/09 3:0 p.m.18 views

CVE-2018-6916

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system...

7.2AI score0.02126EPSS
SaveExploits0References2
CVE
CVE
added 2018/03/09 3:0 p.m.72 views

CVE-2018-6916

CVE-2018-6916 affects FreeBSD kernels prior to 11.1-STABLE/11.1-RELEASE-p7, 10.4-STABLE/10.4-RELEASE-p7, and 10.3-RELEASE-p28. The issue comprises two related IPsec flaws: (1) the kernel does not properly validate IPsec packets from a trusted host, and (2) a use-after-free in the IPsec AH handlin...

9.8CVSS7AI score0.02126EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2018/03/09 3:0 p.m.34 views

CVE-2018-6916

Removed by vendor...

9.8CVSS9.4AI score0.02126EPSS
SaveExploits0
Rows per page
Query Builder