CVE-2014-6424

Wireshark vulnerability CVE-2014-6424 affects the Netflow dissector (epan/dissectors/packet-netflow.c). The issue arises in the dissect_v9_v10_pdu_data function where incorrect offset/start variables can be exploited by a crafted NetFlow packet, leading to an uninitialized memory read and a denia...

CVE-2014-6424

The dissectv9v10pdudata function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service uninitialized memory read and...

CVE-2014-6424

The dissectv9v10pdudata function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service uninitialized memory read and...

Wireshark 1.12.x < 1.12.1 Multiple DoS Vulnerabilities

The installed version of Wireshark is version 1.12.x prior to 1.12.1. It is, therefore, affected by the following vulnerabilities : - Errors exist in the following dissectors that can cause the application to crash : - CUPS CVE-2014-6425 - HIP CVE-2014-6426 - MEGACO CVE-2014-6423 - Netflow...

Wireshark 1.10.x < 1.10.10 Multiple DoS Vulnerabilities

The installed version of Wireshark is version 1.10.x prior to 1.10.10. It is, therefore, affected by the following vulnerabilities : - Errors exist in the following dissectors that can cause the application to crash : - MEGACO CVE-2014-6423 - Netflow CVE-2014-6424 - RTP CVE-2014-6421, CVE-2014-64...

CVE-2014-3335

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service chip and card hangs via a crafted packet, aka Bug ID CSCup77750...

CVE-2014-3335

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service chip and card hangs via a crafted packet, aka Bug ID CSCup77750...

CVE-2014-3335

Cisco IOS XR vulnerability CVE-2014-3335 affects ASR 9000 Series with Typhoon-based line cards configured for NetFlow sampling. The issue stems from improper handling of packets with multicast destination MAC addresses during NetFlow sampling, potentially causing a lockup/reload of the Network Pr...

CVE-2014-3335: Improper Input Validation

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service chip and card hangs via a crafted packet, aka Bug ID CSCup77750...

Cisco IOS XR Software Packet Parsing Denial of Service Vulnerability

A vulnerability in the packet parsing code of Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a Network Processor NP chip and a line card processing traffic. The vulnerability is due ...

Cisco IOS XR Typhoon-based Line Cards and Network Processor (NP) Chip DoS

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related to Netflow and handling malformed IPv4/IPv6 packets. Note this issue only affects Cisco ASR 9000 series devices using Typhoon-based line cards and Netflow...

CVE-2014-3322

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322

Cisco IOS XR on ASR 9000 devices is affected by a NetFlow processing DoS caused by improper sampling of malformed IPv4/IPv6 packets (Bug CSCuo68417). The issue affects Typhoon-based line cards and can cause a lockup and reload of the Network Processor chip and line card when processing malicious ...

CVE-2014-3322: Improper Input Validation

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

Cisco IOS XR Software NetFlow Processing Denial of Service Vulnerability

A vulnerability in NetFlow processing in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a Network Processor NP chip and a line card processing traffic. The vulnerability is due to...

NetFlow Analyzer 5 /jspui/appConfig.jsp task Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...

NetFlow Analyzer 5 /jspui/applicationList.jsp alpha Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...

NetFlow Analyzer 4 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15127/info NetFlow Analyzer 4 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities

No description provided by source. Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International...