2824 matches found
ipsec-tools -- Memory leak leading to denial of service
Javantea reports: It is a null dereference crash, leading to denial of service against the IKE daemon...
Medium: kernel
Issue Overview: A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a...
RHEL 6 : MRG (RHSA-2015:0989)
Updated kernel-rt packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
RHEL 7 : kernel (RHSA-2015:0987)
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a system over a...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
Updated kernel-rt packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the ipsec-tools package up to version 0.7.1 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the ipsec-tools package up to version 0.3.3 of the Gentoo Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the ipsec-tools package up to version 0.7.2 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools-0.6.5 package for the CentOS operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools-0.2.5 package for the CentOS operating system may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools-0.3.3 package of the CentOS operating system may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools package of the OpenSUSE operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools package for the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools-0.3.3 package of the Red Hat Enterprise Linux operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools-0.6.5 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the ipsec-tools-0.2.5 package for the Red Hat Enterprise Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Linux kernel AESNI buffer overflow vulnerability
Linux kernel is an open source operating system. A buffer overflow vulnerability exists in the 'driverrfc4106decrypt' function in the Linux kernel /arch/x86/crypto/aesni-intelglue.c file, which allows a local attacker to exploit the vulnerability by sending specially crafted IPSec packets to cras...
