CVE-2019-6604

On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using non-default Layer 2 forwarding configurations may experience a lockup of the High-Speed Bridge...

Cisco NX-OS Denial of Service Vulnerability

Cisco NX-OS is a set of data center-grade operating system software used by switches. A denial of service vulnerability exists in Cisco NX-OS version 802.1X. The vulnerability stems from a failure to fully authenticate the input of Extensible Authentication Protocol EAPOL frames on the LAN. An...

Google Android L2TP Component Privilege Permission and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which L2TP is an L2TP Internet Tunneling Protocol component. A boost vulnerability exists in the L2TP component in Android. A local attacker can exploit this vulnerability to...

CVE-2018-5531

Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP guest and host systems. Attack must be sourced from adjacent network layer 2...

tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...

DEBIAN-CVE-2017-13006

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...

CVE-2017-13006

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...

Siemens 7KM PAC Switched Ethernet Denial of Service Vulnerability

7KM PAC Switched Ethernet is a switched Ethernet device from Siemens, Germany. A denial of service vulnerability exists in the 7KM PAC Switched Ethernet PROFINET Extension Module versions prior to 2.1.3, which allows an attacker to trigger a denial of service condition via specially crafted...

kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature

A use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system...

kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature

A use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system...

kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature

A use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system...

kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature

A use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system...

OpenDaylight 'odl-l2switch-switch' Denial of Service Vulnerability

OpenDaylight, a project of the Linux Foundation in the United States, is a community-driven, open-source, software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly. A security vulnerability exists in the...

LAME II_step_one function buffer overflow vulnerability

LAME is an open source MP3 audio compression software. A buffer overflow vulnerability exists in the LAME libmpgdecoder.a/mpglib/layer2.c/IIstepone function, which allows remote attackers to exploit the vulnerability by submitting a special file that induces the user to parse it, which can crash...

DEBIAN-CVE-2017-9869

The IIstepone function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file...

The vulnerability of the L2TP function in the Cisco IOS operating system allows a intruder to trigger a device reboot and a service failure.

The vulnerability of the L2TP function in the Cisco IOS operating system exists due to insufficient checking of L2TP packets. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure using a specially crafted L2TP packet...

Siemens SIMATIC HMI Denial of Service Vulnerability

SIMATIC HMI is an industrial device from Siemens, Germany.SIMATIC HMI panels are used for operator control and monitoring of machines and equipment. A denial of service vulnerability in the Siemens SIMATIC HMI Multi-Panel and HMI Mobile Panels, as well as in the S7-300/S7-400 devices, allows an...

SEIL Series routers vulnerable to denial-of-service (DoS)

Overview The DNS forwarder, the PPP Access Concentrator L2TP and the MeasureiPerf server function in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service DoS vulnerability due to a flaw in processing certain packets. Internet Initiative Japan Inc. reported th...

Cisco IOS XE Software L2TP Message Denial of Service Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco in the United States for its network devices. Cisco IOS XE Software's fails to adequately filter L2TP packets. A remote attacker could exploit this vulnerability to submit a special request for a denial of service attack...

CVE-2017-3857

A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and Cisco IOS XE 3.1 through 3.18 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation...