2546 matches found
DEBIAN-CVE-2018-14734
drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial of service use-after-free...
UBUNTU-CVE-2018-14734
drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial of service use-after-free...
Qualcomm Radio Interface Layer Data Compromise
The vulnerability of the Qualcomm Radio Interface Layer component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected...
Spoof SSDP replies to phish for NTLM hashes: evil-ssdp
This tool responds to SSDP multicast discover requests, posing as a generic UPNP device on a local network. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable webpage. By default, this...
Microsoft Windows: Turn off multicast name resolution
This test checks the setting for policy OpenVAS Vulnerability Test $Id: windcmulticastnameresolution.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off multicast name resolution Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...
PT-2018-2559
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.17.11 Description The issue is related to a use-after-free error in the ucma leave multicast function, allowing attackers to cause a denial of service. This occurs because the function accesses a certain data...
CVE-2018-1240
Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...
CVE-2018-1240
Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...
Information disclosure
Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...
CVE-2018-1240
Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...
CVE-2018-1240: Exposure of Sensitive Information to an Unauthorized Actor
Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...
ntp security, bug fix, and enhancement update
4.2.6p5-28.0.1 - Bump release to avoid ULN conflict with Oracle modified errata. 4.2.6p5-28 - fix buffer overflow in datum refclock driver CVE-2017-6462 - fix crash with invalid unpeer command CVE-2017-6463 - fix potential crash with invalid server command CVE-2017-6464 - add Spectracom TSYNC...
tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...
tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...
Memory corruption
A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service DoS condition, aka a Memory Leak. The vulnerability ...
CVE-2018-0165
A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service DoS condition, aka a Memory Leak. The vulnerability ...
CVE-2018-0165
A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service DoS condition, aka a Memory Leak. The vulnerability ...
CVE-2018-0165: Missing Release of Resource after Effective Lifetime
A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service DoS condition, aka a Memory Leak. The vulnerability ...
artemis/hornetq: memory exhaustion via UDP and JGroups discovery
It was found that when Artemis and HornetQ are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...
artemis/hornetq: memory exhaustion via UDP and JGroups discovery
It was found that when Artemis and HornetQ are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...