SUSE-SU-2017:0607-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE-SU-2017:0607-3 Security update for openssh

This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

OpenSSL Null Pointer Indirect Reference Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. OpenSSL suffers from a denial of service vulnerability. A denial of service results due to a malicious server that provides malformed parameters to the DHE or ECDHE key exchange, allowi...

Simple OpenVPN Raspberry Pi Installer: piVPN

Simple OpenVPN Raspberry Pi Installer This is a set of shell scripts that serve to easily turn your Raspberry Pi TM into a VPN server using the free, open-source OpenVPN software. The master branch of this script installs and configures OpenVPN on Raspbian Jessie and has been tested on Ubuntu 14....

Tcpdump ISAKMP parser buffer overflow vulnerability

Tcpdump is a popular network analysis program. Tcpdump ISAKMP parser print-isakmp.c:ikev2eprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

CVE-2016-9216

An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. More Information: CSCuy06917 CSCuy45036 CSCuy59525. Known Affected Releases: 20.0.0 20.0.M0.62842 20.0....

Cisco ASR 5000 Series Software Denial of Service Vulnerability (CNVD-2017-00903)

Cisco ASR 5000 Series Software is a 5000 series wireless controller product from Cisco USA. A denial of service vulnerability exists in the psecmgr process in Cisco ASR 5000 Series Software. A remote attacker can exploit this vulnerability by submitting specially crafted IKE packets to the target...

CVE-2016-6886

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

CVE-2016-6886

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

CVE-2016-6886

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

Code injection

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

CVE-2016-6886

The CVE-2016-6886 issue affects MatrixSSL prior to 3.8.4, where the pstm_reverse function can be abused during RSA key exchange to trigger an invalid memory read and crash, enabling a remote denial-of-service. The vulnerability is triggered by a zero value or by the key’s modulus for the secret k...

CVE-2016-6886

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

Cisco ASR 5000 Series Denial of Service Vulnerability (CNVD-2016-12775)

Cisco ASR 5000 Series Software is a 5000 series wireless controller product from Cisco USA. A security vulnerability exists in Cisco ASR 5000 Series Software. An attacker could exploit this vulnerability by sending specially crafted IKEv2 packets to cause the ipsecmgr process to crash...

The vulnerability of the OpenSSH cryptographic protection mechanism, which allows a hacker to trigger a service failure.

The vulnerability of the kexinputkexinit function in the kex.c service of the OpenSSH cryptographic security tool allows a remote attacker to trigger a service failure memory consumption by sending multiple identical KEXINIT requests...

Design/Logic Flaw

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. DISPUTED The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a...

UBUNTU-CVE-2016-8858

The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."...

CVE-2016-8858

The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."...

UBUNTU-CVE-2016-8635

It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group...