RHEL 5 : dhcp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dhcp: unclosed TCP connections to OMAPI or failover ports can cause DoS CVE-2016-2774 - dhcp: Reference...

CVE-2021-47515

CVE-2021-47515 affects Linux kernel segmentation with IPv6 SRH encapsulation. When an IPv4 packet is received, the kernel assigns the receiving interface index to IPCB(iif). If that packet is later encapsulated in an outer IPv6+SRH header, seg6_do_srh_encap clears the IPv6 socket state (IP6CB) an...

CVE-2021-47515 seg6: fix the iif in the IPv6 socket control block

In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the iprcvcore... sets the receiving interface index into the IPv4 socket control block v5.16-rc4, net/ipv4/ipinput.c line 510: IPCBskb-iif =...

Cisco Access Points Managed from Catalyst DoS (cisco-sa-ap-dos-h9TGGX6W)

According to its self-reported version, Cisco access points managed by this Cisco Catalyst 9800 Series Wireless Controller are affected by a denial of service vulnerability. Due to insufficient input validation of certain IPv4 packets, an unauthenticated, remote attacker can causing attached acce...

CVE-2024-20271: Improper Input Validation

A vulnerability in the IP packet processing of Cisco Access Point AP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could...

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

CVE-2021-46955: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

Schneider Electric Modicon Out-of-bounds Write (CVE-2020-7524)

Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller V5.0.0.7 and prior which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4...

K57500018: ISC DHCP 4.x vulnerability CVE-2015-8605

Security Advisory Description ISC DHCP 4.x before 4.1-ESV-R12-P1 and 4.2.x and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service application crash via an invalid length field in a UDP IPv4 packet. CVE-2015-8605 Impact A remote attacker may be able to cause a Dynamic Host...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-2345)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service. The vulnerability exists due to an integer underflow triggering when handling IPv4 packets which allows an attacker to cause an application crash...

GSD-2021-1000177 openvswitch: fix stack OOB read while fragmenting IPv4 packets

openvswitch: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

PT-2021-28644

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.4.118 Linux Kernel versions v4.16 through v5.4.117 Description A potential security issue exists due to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have...

PT-2021-28537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.12.3 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-24543

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.11 through v5.12.3 Description: The issue concerns a stack out-of-bounds read while fragmenting IPv4 packets. This problem was introduced in version v5.11 and is fixed in version v5.12.3. Recommendations: For Linux...

PT-2021-28612

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.10.36 Description The issue concerns a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.10.36. The...

PT-2021-28539

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.12.3 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-24584

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.11.20 Linux Kernel versions v4.16 through v5.11.19 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel...

PT-2021-28578

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.11.20 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.11.20...