openvswitch: MPLS buffer overflow vulnerability

A buffer overflow flaw was discovered in the OVS processing of MPLS labels. A remote attacker able to deliver a frame containing a malicious MPLS label that would be processed by OVS could trigger the flaw and use the resulting memory corruption to cause a denial of service DoS or, possibly,...

openvswitch: MPLS buffer overflow vulnerability

A buffer overflow flaw was discovered in the OVS processing of MPLS labels. A remote attacker able to deliver a frame containing a malicious MPLS label that would be processed by OVS could trigger the flaw and use the resulting memory corruption to cause a denial of service DoS or, possibly,...

openvswitch: MPLS buffer overflow vulnerability

A buffer overflow flaw was discovered in the OVS processing of MPLS labels. A remote attacker able to deliver a frame containing a malicious MPLS label that would be processed by OVS could trigger the flaw and use the resulting memory corruption to cause a denial of service DoS or, possibly,...

openvswitch: MPLS buffer overflow vulnerability

A buffer overflow flaw was discovered in the OVS processing of MPLS labels. A remote attacker able to deliver a frame containing a malicious MPLS label that would be processed by OVS could trigger the flaw and use the resulting memory corruption to cause a denial of service DoS or, possibly,...

Open vSwitch Buffer Overflow Vulnerability

Open vSwitch OVS is a multi-layer virtual switch product based on open source technology following the Apache 2.0 license, which supports large-scale network automation through programmatic extensions, standard management interfaces and protocols, and more. A buffer overflow vulnerability exists ...

UBUNTU-CVE-2016-2074

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...

Huawei Router VPN Route Forwarding Jump Vulnerability

Huawei NE series routers are Huawei's high-end routers for carrier data communication networks. The Huawei NE20E-S, NE40E-M, NE40E-M2 routers versions prior to V800R007C10SPC100 and NE40E, NE80E routers versions prior to V800R007C00SPC100 suffer from a VPN routing and forwarding hop vulnerability...

Cisco IOS XE Network Address Translation and Multiprotocol Label Switching DoS (CSCut96933)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for Network Address Translation NAT and/or Multiprotocol Label Switching MPLS. It is, therefore, affected by a flaw in the NAT and MPLS services due to improper processing of IPv4 packets. An...

Cisco IOS XE Network Address Translation Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS XE Software when handling IPv4 that requires NAT and MPLS services. A remote attacker could exploit this vulnerability to cause a reload ...

PT-2015-3305 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3 Description: The issue is related to the skb flow dissect function in net/core/flow dissector.c, which does not properly initialize n proto, ip proto, and thoff. This allows remote attackers to cause a denia...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially crafted MPLS packet...

Cisco IOS Software UBR Devices IPv6 VPN Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability in Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching allows remote attackers to quickly cause a denial of service by sending...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2015-04082)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS XR version 5.1.3, which can be exploited by remote attackers to cause a denial of service process reloading via constructed MPLS LDP...

Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing of malformed Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit NPU and a line...

Cisco IOS XR MPLS and Network Processor (NP) Chip DoS (Typhoon-based Line Cards)

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related the handling of maliciously crafted MPLS Multiprotocol Label Switching packets routed by a bridge-group virtual interface. Note that this issue only affects...

Cisco IOS XR Software Multiprotocol Label Switching Packet Vulnerability (cisco-sa-20100324-ldp)

A device running Cisco IOS XR Software is vulnerable to a remote denial of service DoS condition if it is configured for Multiprotocol Label Switching MPLS and has support for Label Distribution Protocol LDP. A crafted LDP UDP packet can cause an affected device running Cisco IOS XR Software to...

DEBIAN-CVE-2013-1578

The dissectpwethheuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service loop via a malformed...

Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-rsvp Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +---------------------------------------------------------------------...

Cisco IOS Software IP Version 6 over Multiprotocol Label Switching Vulnerabilities (cisco-sa-20110928-ipv6mpls)

Cisco IOS Software is affected by two vulnerabilities that cause a Cisco IOS device to reload when processing IP version 6 IPv6 packets over a Multiprotocol Label Switching MPLS domain. These vulnerabilities are : - Crafted IPv6 Packet May Cause MPLS-Configured Device to Reload - ICMPv6 Packet Ma...

CVE-2010-0576

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching MPLS and Label Distribution Protocol LDP are enabled, allows remote attackers to cause a denial of service device reload or process...