Code injection

The sfc aka Solarflare Solarstorm driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service DMA descriptor consumption and network-controller outage via crafted TCP packets that trigger a small MSS value...

kernel: sfc: potential remote denial of service through TCP MSS option

The sfc aka Solarflare Solarstorm driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service DMA descriptor consumption and network-controller outage via crafted TCP packets that trigger a small MSS value...

USN-1186-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that IPC structures were not correctly initialized on 64bit systems. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. CVE-2010-4073 Steve Chen discovered that setsockopt did not correctly check MSS values. A local attacker cou...

Ubuntu 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1054-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Rosenberg discovered that the Linux kernel TIPC implementation...

CVE-2008-3081

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

CVE-2008-3081

Technical details such as affected product components, root cause, and fix are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-4471

POP3 service in Avaya Modular Messaging Message Storage Server MSS 2.0 SP 4 and earlier allows remote attackers to cause a denial of service infinite loop via crafted packets...

CVE-2005-4471

POP3 service in Avaya Modular Messaging Message Storage Server MSS 2.0 SP 4 and earlier allows remote attackers to cause a denial of service infinite loop via crafted packets...

CVE-2005-4471

CVE-2005-4471 concerns the POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP4 and earlier. The vulnerability allows remote attackers to cause a denial-of-service (infinite loop) by sending crafted packets over the network. The available records explicitly identify the af...

CVE-2005-4471: Undefined Security Weakness

POP3 service in Avaya Modular Messaging Message Storage Server MSS 2.0 SP 4 and earlier allows remote attackers to cause a denial of service infinite loop via crafted packets...

CVE-2004-0002

CVE-2004-0002 describes a denial-of-service risk in the TCP MSS handling in netinet. Remote attackers can exhaust resources by (1) setting a very small MTU, generating many small packets, or (2) sending numerous packets with tiny payloads that trigger many calls to sowakeup. The available connect...

CVE-2004-0002

The TCP MSS maximum segment size functionality in netinet allows remote attackers to cause a denial of service resource exhaustion via 1 a low MTU, which causes a large number of small packets to be produced, or 2 via a large number of packets with a small TCP payload, which cause a large number ...

CVE-2004-0002: Undefined Security Weakness

The TCP MSS maximum segment size functionality in netinet allows remote attackers to cause a denial of service resource exhaustion via 1 a low MTU, which causes a large number of small packets to be produced, or 2 via a large number of packets with a small TCP payload, which cause a large number ...

CVE-2001-1244

Technical details such as affected products, versions, and root cause are not publicly provided in the connected documents. Monitor CVE-2001-1244 updates for concrete details.

HP-UX 11 Linux Kernel 2.4 Windows 2000NT 4.0 IRIX 6.5 - Small TCP MSS Denial of Service

HP-UX 11 Linux Kernel 2.4 Windows 2000NT 4.0 IRIX 6.5 - Small TCP MSS Denial of Service / source: https://www.securityfocus.com/bid/2997/info A potential denial of service vulnerability exists in several TCP stack implementations. TCP has a MSS maximum segment size option that is used by a TCP...

CVE-2001-0026

CVE-2001-0026 affects rp-pppoe, a userspace PPPoE client. The issue occurs when a crafted TCP segment uses the Clamp MSS option with a zero-length option, which can cause the client to enter an infinite loop and drop the connection (denial of service). Mandrake/MDKSA-2000:084 notes versions prior...

CVE-2001-0026

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option...

CVE-2001-0026: Undefined Security Weakness

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option...