Moxa EDR-810 Denial of Service Vulnerability (CNVD-2018-11729)

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A denial of service vulnerability exists in the service proxy feature of the Moxa EDR-810 V4.1 build 17030317. An attacker can exploit this vulnerability b...

dnsmasq: Improper bounds checking leads to a buffer overread

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491...

Denial Of Service (DoS)

github.com/valyala/fasthttp is vulnerable to denial of service DoS attacks. The library does not define a maximum body size for the packets it receives, allowing a malicious user to exhaust the application's memory by sending large packets to it...

kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash

Linux kernel built with the 802.1Q/802.1ad VLANCONFIGVLAN8021Q OR Virtual eXtensible Local Area NetworkCONFIGVXLAN with Transparent Ethernet BridgingTEB GRO support, is vulnerable to a stack overflow issue. It could occur while receiving large packets via GRO path, as an unlimited recursion could...

CVE-2017-5388

A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox 51...

The vulnerability of the SIP server Kamailio, which allows attackers to trigger a service failure or execute arbitrary codes.

The vulnerability of the encodemsg function in the encodemsg.c file of the SEAS SIP server module Kamailio arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code memory corruption, emergen...

CVE-2016-4001

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

DEBIAN-CVE-2016-4001

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

Buffer overflow

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

CVE-2016-4001

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

UBUNTU-CVE-2016-4049

The bgpdumproutesfunc function in bgpd/bgpdump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service assertion failure and daemon crash via a large BGP packet...

Quagga BGP Routing Backend Program Denial of Service Vulnerability

The Quagga BGP Routing Daemon is a collection of daemons, managed by the core daemon zebra, which is mainly used to realize the exchange of routing information with peer nodes running the same routing protocol. The Quagga BGP Routing Daemon's bgpd uses regular dumps and allows remote attackers to...

DEBIAN-CVE-2016-4002

Buffer overflow in the mipsnetreceive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service memory corruption and QEMU crash or possibly execute arbitrary code via a packet larger than 1514 bytes...

UBUNTU-CVE-2016-4002

Buffer overflow in the mipsnetreceive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service memory corruption and QEMU crash or possibly execute arbitrary code via a packet larger than 1514 bytes...

CVE-2016-4002

Buffer overflow in the mipsnetreceive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service memory corruption and QEMU crash or possibly execute arbitrary code via a packet larger than 1514 bytes...

UBUNTU-CVE-2016-4001

Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service QEMU crash via a large packet...

qemu -- denial of service vulnerability in virtio-net support

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the Virtual Network Devicevirtio-net support is vulnerable to a DoS issue. It could occur while receiving large packets over the tuntap/macvtap interfaces and when guest's virtio-net driver did not support...

Kernel: net: IPv6: panic when UFO=On for an interface

net/ipv6/ip6output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload UFO processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service memory corruption and system crash or...

DEBIAN-CVE-2013-4563

The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service panic via a lar...

qemu: e1000 driver buffer overflow when processing large packets when SBP and LPE flags are disabled

Buffer overflow in the e1000receive function in the e1000 device driver hw/e1000.c in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service guest OS crash and possibly execute arbitrary guest code via a large packet...