How Iran's Government Shut Off the Internet

After years of centralizing internet control, Iran pulled the plug on connectivity for nearly all of its citizens...

tcpdump buffer overflow vulnerability (CNVD-2019-40786)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer error vulnerability exists in the 'icmpprint' function in the print-icmp.c file of the ICMP parser in versions prior to tcpdump...

UBUNTU-CVE-2018-14882

The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c...

The vulnerability of the iputils utility in the Astra Linux operating system, which allows a hacker to circumvent established access control rules

The vulnerability of the iputils utility in the Astra Linux operating system is related to the absence of a prohibition for using the -p option. Exploiting this vulnerability allows a remote attacker to circumvent established access control rules by sending data over the network within ICMP packe...

The vulnerability of the ICMP packet processing module in the XNU kernel of iOS and macOS operating systems allows attackers to execute arbitrary code.

The vulnerability of the ICMP packet processing module in the XNU kernel of iOS and macOS operating systems is caused by an overflow in the buffer in the “stack”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted ICMP packets...

CVE-2018-4407

creationtimestamp| type| source ---|---|--- 2018-11-01 16:55:05+00:00| published-proof-of-concept| https://t.me/alexmakus/2490 2018-11-01 21:54:24+00:00| seen| https://t.me/zhovnerhub/181 2018-11-01 21:59:59+00:00| published-proof-of-concept| https://t.me/antichat/2495 2018-11-02 02:17:41+00:00|...

PT-2018-1975 · Apple · Watchos +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved validation. The issue is related to a buffer overflow in the heap ...

A week in security (July 2 – July 8)

Last week, we tracked back a large mining operation from their Coinhive shortlink, we took a look at online project management tools, we described a new macro-less technique to distribute malware, and talked about a Mac malware that targets crypto-mining users. Other news: Huawei enterprise comms...

tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

MikroTik Denial of Service Vulnerability

MikroTik is a set of routing operating system based on Linux core development of Latvian MikroTik company. The system turns a PC computer into a professional router. A security vulnerability exists in MikroTik version 6.40.5. A remote attacker can exploit this vulnerability with a large number of...

Input validation vulnerability in multiple Huawei products

Huawei S2300 and others are switching devices from Huawei in China.IP stack is one of the transport protocols. A security vulnerability exists in the IP stack of several Huawei products, which stems from the failure of the message processing module to correctly determine the IP option length. The...

PT-2017-3910

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the ICMP parser, specifically in the icmp print function in print-icmp.c. This can be exploited by a remote attacker to cause a denial of service or...

DEBIAN-CVE-2017-12895

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-12895

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

Tcpdump ICMP parser buffer overflow vulnerability (CNVD-2017-28294)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the 'icmpprint' functio...

Tcpdump ICMP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.ICMP parser is one of the Internet Control Message Protocol parsers...

Facebook Covertly Launches A Photo-Sharing App In China

The Chinese market is no doubt a pot of gold for big technology giants with over 700 million internet users, but the Chinese government heavily controls the Internet within its borders through its Golden Shield project – the Great Firewall of China. The Great Firewall has blocked some 171 out of...

CVE-2017-3825

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to...

DEBIAN-CVE-2017-2671

The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service panic by leveraging access to the protocol value of...