CVE-2018-0017 SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT

A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...

CVE-2017-18137

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while processing the IPv6 pdp address of the pdp context, a buffer overflow can occur...

CVE-2017-18137

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while processing the IPv6 pdp address of the pdp context, a buffer overflow can occur...

Kernel update: Virtuozzo ReadyKernel patch 48.0 for Virtuozzo 7.0.6 and 7.0.6 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the Virtuozzo 7.0 kernels 3.10.0-693.1.1.vz7.37.30 7.0.6 and 3.10.0-693.11.6.vz7.40.4 7.0.6 HF3. Vulnerability id: PSBM-81798 It was discovered that IPv6 routing tables incorrectly handled routing...

tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser

The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...

Kernel update: Virtuozzo ReadyKernel patch 48.0 for Virtuozzo 7.0.7

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the Virtuozzo 7.0 kernel 3.10.0-693.17.1.vz7.43.10 7.0.7. Vulnerability id: PSBM-79229 If a container used its own network namespace for tun devices, suspend/resume and live migration of said contain...

tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2018-08474)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the Switch Integrated Security feature of Cisco IOS XE Software for handling IPv6 packets can be exploited by a remote attacker to submit a special reques...

Design/Logic Flaw

A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending...

CVE-2018-0164

A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending...

CVE-2018-0164

CVE-2018-0164 affects Cisco IOS XE Software Switch Integrated Security Features IPv6 DoS. Vulnerable component: handling of crafted IPv6 packets leading to an interface queue wedge. Affected products: Cisco cBR-8 Converged Broadband Router; Cisco ASR 1000 Series Aggregation Services Routers; Cisc...

CVE-2018-0164

A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending...

CVE-2018-0164

A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending...

Cisco IOS XE Software Switch Integrated Security Features IPv6 Denial of Service Vulnerability

A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending...

Solaris 10 (sparc) : 148383-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem/NFS. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this...

Solaris 10 (x86) : 148384-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem/NFS. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this...

The vulnerability of the cp_v6_syn_recv_sock function in the Linux operating system, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the cpv6synrecvsock function net/ipv6/tcpipv6.c in the Linux operating system is related to writing data beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a remote attacker to cause service failures or other adverse effects...

UBUNTU-CVE-2018-1065

The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that contains a jump but lacks a user-defined chain, which allows local users to cause a denial of service NULL pointer dereference by leveraging the CAPNETRAW or CAPNETADMIN capability, related to...

Arista Networks EOS IPv6 Neighbor Discovery Packet DoS (SA0022)

The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability due to a flaw when handling specially crafted IPv6 Neighbor Discovery packets from non link-local sources. An unauthenticated, remote attacker can exploit this, via specially crafted...