USN-2889-2: Linux kernel (Vivid HWE) vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

USN-2889-1: Linux kernel vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-2890-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2890-2 advisory. It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollc...

Ubuntu 15.10 : linux-raspi2 vulnerabilities (USN-2890-3)

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2889-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2889-2 advisory. It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollc...

Damn Vulnerable Node Application: DVNA

Damn Vulnerable Node Application DVNA is a node.js web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid...

Infernal-Twin - This Is Evil Twin Attack Automated (Wireless Hacking)

This tool is created to aid the penetration testers in assessing wireless security. Author is not responsible for misuse. Please read instructions thoroughly. Usage sudo python InfernalWireless.py How to install $ sudo apt-get install apache2 $ sudo apt-get install mysql-server...

Design/Logic Flaw

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

CVE-2015-6282

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

CVE-2015-6282

Cisco IOS XE Network Address Translation Denial of Service vulnerability (CVE-2015-6282) affects Cisco IOS XE Software for ASR 1000, ISR 4300/4400, and Cloud Services 1000v routers. The issue arises from improper processing of IPv4 packets that require NAT and MPLS, enabling an unauthenticated, r...

Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability

A vulnerability in the processing of IPv4 packets that require Network Address Translation NAT and Multiprotocol Label Switching MPLS services of Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4300 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers could allo...

Automated Evil Twin Attack: infernal-twin

Evil twin is a term for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. An evil twin is the wireless version of the phishing scam. An attacker fools wireless users into connecting a lapto...

CVE-2015-6272

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

Design/Logic Flaw

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

Code injection

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6272

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6271

CVE-2015-6271 affects Cisco IOS XE (versions 2.1.0–2.4.3 and 2.5.0) on ASR 1000 devices. When NAT Application Layer Gateway is enabled, remote attackers can cause a denial of service by sending crafted SIP packets that crash the Embedded Services Processor. This is documented with Bug IDs CSCta74...

CVE-2015-6272

Cisco IOS XE 2.1.0–2.2.3 and 2.3.0 on ASR 1000 devices are affected when NAT Application Layer Gateway is enabled. A crafted H.323 packet can cause the Embedded Services Processor to crash, leading to a denial of service. The issue is triggered by NAT ALG handling of H.323 messages; no explicit e...

CVE-2015-6273

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

SOL16843 - NAT-PMP vulnerability VU#184540

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...