3565 matches found
Design/Logic Flaw
The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...
Cross site scripting
The Zone-Based Firewall ZFW feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service device reload or hang via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174...
Code injection
The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...
CVE-2013-5476
The Zone-Based Firewall ZFW feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service device reload or hang via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174...
CVE-2013-5479
The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...
Ubuntu: Security Advisory (USN-1945-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kernel: ipv6: using ipv4 vs ipv6 structure during routing lookup in sendmsg
The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...
Oracle Linux 6 : kernel (ELSA-2013-1173)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1173 advisory. - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - bluetooth L2CAP - Fix info leak via getsockname...
kernel security and bug fix update
2.6.32-358.18.1 - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - net br: fix schedule while atomic issue in brfeaturesrecompute Jiri Pirko 990464 980876 - scsi isci: Fix a race condition in the SSP task management path David Milburn 990470 97860...
[ZMap v1.0.3] The Internet Scanner
ZMap is an open-source network scanner that enables researchers to easily perform Internet-wide network studies. With a single machine and a well provisioned network uplink, ZMap is capable of performing a complete scan of the IPv4 address space in under 45 minutes, approaching the theoretical...
Kernel: ipv6: using ipv4 vs ipv6 structure during routing lookup in sendmsg
The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...
Scanning the Internet in 45 Minutes
The Internet is a big thing. Or, more accurately, a big collection of things. Figuring out exactly how many things, and what vulnerabilities those things contain has always been a challenge for researchers, but a new tool released by a group from the University of Michigan that is capable of...
Multiple Vulnerabilities in Cisco Intrusion Prevention System Software (cisco-sa-20130717-ips)
According to its self-reported version, the version of the Cisco Intrusion Prevention System Software running on the remote host has the following vulnerabilities : - The IP stack in Cisco IPS Software could allow remote attackers to cause a denial of service DoS condition via malformed IPv4...
CVE-2013-3411
The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...
CVE-2013-1243
The IP stack in Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software and hardware modules before 7.15E4, IPS 4500 sensors before 7.16E4, and IPS 4300 sensors before 7.15E4 allows remote attackers to cause a denial of service MainApp process hang via malformed IPv4 packets...
CVE-2013-3410
Cisco Intrusion Prevention System IPS Software on IPS NME devices before 7.09E4 allows remote attackers to cause a denial of service device reload via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977...
Design/Logic Flaw
The IP stack in Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software and hardware modules before 7.15E4, IPS 4500 sensors before 7.16E4, and IPS 4300 sensors before 7.15E4 allows remote attackers to cause a denial of service MainApp process hang via malformed IPv4 packets...
Code injection
The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...
CVE-2013-3410
Cisco Intrusion Prevention System IPS Software on IPS NME devices before 7.09E4 allows remote attackers to cause a denial of service device reload via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977...
CVE-2013-3411
The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...