Input validation

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability b...

Input validation

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...

CVE-2020-3363

The CVE-2020-3363 flaw affects Cisco Small Business Smart and Managed Switches, specifically the IPv6 packet processing engine. The issue stems from insufficient validation of incoming IPv6 traffic, which could let an unauthenticated, remote attacker send a crafted IPv6 packet that may cause an u...

CVE-2020-3363 Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...

CVE-2020-3363 Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...

CVE-2020-3500

CVE-2020-3500 affects Cisco StarOS IPv6 handling. The vulnerability arises from insufficient validation of incoming IPv6 traffic in StarOS, allowing an unauthenticated, remote attacker to trigger a DoS by sending crafted IPv6 packets, causing the device to reload. IPv4 traffic is unaffected. Conn...

CVE-2020-3500 Cisco StarOS IPv6 Denial of Service Vulnerability

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability b...

CVE-2020-3500 Cisco StarOS IPv6 Denial of Service Vulnerability

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability b...

CVE-2020-3363: Improper Input Validation

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...

CVE-2020-3500: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability b...

Cisco StarOS IPv6 Denial of Service Vulnerability (cisco-sa-asr-dos-zJLJFgBf)

According to its self-reported version, Cisco ASR 5000 Series Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

High-Severity Cisco DoS Flaw Plagues Small-Business Switches

Cisco is warning of a high-severity flaw that could allow remote, unauthenticated attackers to cripple several of its popular small-business switches with denial of service DoS attacks. The vulnerability stems from the IPv6 packet processing engine in the switches. IPv6 also known as Internet...

Cisco StarOS Buffer Overflow Vulnerability

Cisco StarOS is a set of virtualization operating system of the American Cisco Cisco. A buffer overflow vulnerability exists in the IPv6 implementation of Cisco StarOS prior to version 21.18.3, which arises from a program's failure to adequately validate incoming IPv6 traffic. A remote attacker...

Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...

Cisco StarOS IPv6 Denial of Service Vulnerability

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability b...

Cisco StarOS IPv6 Denial of Service Vulnerability

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability b...

PT-2020-4216

Name of the Vulnerable Software and Affected Versions: StarOS affected versions not specified Description: The issue is related to insufficient input validation in the IPv6 traffic processing service of the StarOS operating system. This can be exploited by a remote attacker to cause a denial of...

PT-2020-4231

Name of the Vulnerable Software and Affected Versions: Cisco StarOS affected versions not specified Description: A vulnerability in the IPv6 implementation could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The issue is due to...

PT-2020-4214

Name of the Vulnerable Software and Affected Versions: Cisco Small Business Smart and Managed Switches affected versions not specified Cisco Small Business 250 Series affected versions not specified Cisco Small Business 350 Series affected versions not specified Cisco Small Business 350X Series...

FreeBSD ip6_setpktopt Use-After-Free Privilege Escalation Exploit

This Metasploit module exploits a race and use-after-free vulnerability in the FreeBSD kernel IPv6 socket handling. A missing synchronization lock in the IPV62292PKTOPTIONS option handling in setsockopt permits racing ip6setpktopt access to a freed ip6pktopts struct. This exploit overwrites the...