Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

PT-2011-1465 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: The issue is related to multiple integer overflows in the PPPoL2TP and IPoL2TP implementations. Specifically, the pppol2tp sendmsg function in net/l2tp/l2tp ppp.c and the l2tp ip sendmsg...

Linux Kernel l2tp_ip_sendmsg()和pppol2tp_sendmsg()函数整数溢出漏洞

BUGTRAQ ID: 44762 CVE ID: CVE-2010-4160 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel中的PPPoL2TP实现（net/l2tp/l2tpppp.c，pppol2tpsendmsg）和IPoL2TP实现（net /l2tp/l2tpip.c，l2tpipsendmsg）都调用了sockwmalloc，而后者没有执行任何边界检查便对大小参数执行了算术运算。因此，如果发布了超大大小的sendto调用，这个分配大小就会回绕，导致分配过小的缓冲区。成功利用这个漏洞可能导致内核忙碌或内核堆溢出。 Linux...

Ubuntu Update for Linux kernel vulnerabilities USN-1000-1

Ubuntu Update for Linux kernel vulnerabilities USN-1000-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10001.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-1000-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1000-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2, linux-source-2.6.15 vulnerabilities (USN-1000-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a...

USN-1000-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a...

Linux kernel 2.6.x L2TP实现远程拒绝服务漏洞

BUGTRAQ ID: 41077 CVE ID: CVE-2010-2495 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的L2TP实现中drivers/net/pppol2tp.c文件中的pppol2tpxmit函数没有验证某些与接口相关的值，远程攻击者可以通过发送恶意L2TP报文触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Null pointer dereference

The pppol2tpxmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecifi...

CVE-2010-2495

CVE-2010-2495 affects the Linux kernel’s L2TP implementation (pppol2tp.c). The vulnerability arises from improper validation of certain interface-related values in pppol2tp_xmit, enabling a NULL pointer dereference and an OOPs that can cause a denial of service via routing-change vectors. The iss...

Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

A vulnerability exists in the Cisco IOS software implementation of Layer 2 Tunneling Protocol L2TP, which affects limited Cisco IOS software releases. Several features enable the L2TP mgmt daemon process within Cisco IOS software, including but not limited to Layer 2 virtual private networks L2VP...

JVN#49602378 SEIL/B1 authentication issue

The PPP Access Concentrator PPPAC function within SEIL/B1 contains an issue in the CHAP and MS-CHAP-V2 authentication processes, the same challenge value is repeatedly used for each authentication attempt. Impact A third party may be able to perform replay attacks. As a result, the third party ma...

FreeBSD : L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump (96ba2dae-4ab0-11d8-96f2-0020ed76ef5a)

Jonathan Heusser discovered vulnerabilities in tcpdump's L2TP, ISAKMP, and RADIUS protocol handlers. These vulnerabilities may be used by an attacker to crash a running tcpdump' process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-625-1

Ubuntu Update for Linux kernel vulnerabilities USN-625-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6251.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-625-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networ...

Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol L2TP Denial of Service Vulnerability Advisory ID: cisco-sa-20080924-l2tp http://www.cisco.com/warp/public/707/cisco-sa-20080924-l2tp.shtml Revision 1.0 For Public Release 2008...

Cisco IOS, Cisco 10000, uBR10012, uBR7200 and Cisco UCM multiple security vulnerabilities

DoS with L2TP, MPLS, IPS, SIP, SSL vulnerabilities, information leaks, multiple multicast security vulnerabilities, NAT SCP, IOS Software firewall application inspection security vulnerabilities...

CVE-2008-3813

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...

Code injection

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...

CVE-2008-3813

Cisco IOS 12.2 and 12.4 are affected by CVE-2008-3813 due to the L2TP management daemon running on the device. When this daemon is enabled (in features like L2VPN, L2TPv3, SGBP, or VPDN), processing a specially crafted L2TP packet can trigger a device reload, resulting in a denial of service. The...

CVE-2008-3813

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...