507 matches found
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
Tcpdump LLDP Parser Denial of Service Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...
Tcpdump LLDP Parser Buffer Overflow Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...
UBUNTU-CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
PT-2017-12898
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp private 8023 print function within the print-lldp.c file. Recommendations For versions prior to 4.9.2, update t...
kernel: ping socket / AF_LLC connect() sin_family race
A race condition leading to a NULL pointer dereference was found in the Linux kernel's Link Layer Control implementation. A local attacker with access to ping sockets could use this flaw to crash the system...
kernel: ping socket / AF_LLC connect() sin_family race
A race condition leading to a NULL pointer dereference was found in the Linux kernel's Link Layer Control implementation. A local attacker with access to ping sockets could use this flaw to crash the system...
kernel: ping socket / AF_LLC connect() sin_family race
A race condition leading to a NULL pointer dereference was found in the Linux kernel's Link Layer Control implementation. A local attacker with access to ping sockets could use this flaw to crash the system...
NetworkRecon: PowerShell to Identify Network Vulnerabilities!
PenTestIT RSS Feed As PowerShell becomes more prevalent in the Windows environment, so will it's use for vulnerability assessment and penetration tests. I have covered a few of them earlier such as PowerSploit, PSAttack. However none of the ones I mentioned help you detect network vulnerabilities...
IPv6 Address Spoofing: sylkie
IPv6 Address Spoofing A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Dependencies libseccomp json-c Build Get the code and compile it! Get the code git clone...
Security Using Pre-Existing Routing for Mobile Ad hoc Networks: SUPERMAN
Security Using Pre-Existing Routing for Mobile Ad hoc Networks The flexibility and mobility of Mobile Ad hoc Networks MANETs have made them increasing popular in a wide range of use cases. To protect these networks, security protocols have been developed to protect routing and application data...
Windows Meterpreter Shell, Reverse TCP Inline (IPv6) (x64)
Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 203846 include Msf::Payload::TransportConf...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c file of the Qualcomm Android operating system is related to a missing unit error. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created application that sends...
The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco IOS operating system arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure abnormal shutdown by using specially crafted LLDP packets...
The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco IOS operating system arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure abnormal shutdown by using specially crafted LLDP packets...
CVE-2016-1425
Cisco IOS 15.02SG5, 15.12SG3, 15.21E, 15.33S, and 15.41.13S allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun66735...
Cisco IOS Denial of Service Vulnerability (CNVD-2016-04224)
Cisco IOS is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS versions 15.21T1.11 and 15.22TST. An attacker could exploit this vulnerability to cause a denial of service device crash by sending specially crafted LLDP packets...
Cisco IOS Software Link Layer Discovery Protocol Processing Code Denial of Service Vulnerability (cisco-sa-20160616-ios)
A vulnerability in the Link Layer Discovery Protocol LLDP packet processing code of Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced...
Cisco IOS Denial of Service Vulnerability (CNVD-2016-04228)
Cisco IOS is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS. An attacker could exploit this vulnerability by sending specially crafted Link Layer Discovery Protocol LLDP packets to cause a denial of service device crash...
USN-3006-1 linux vulnerabilities
Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...