Cisco IOS Software Network Address Translation Denial of Service Vulnerability

A vulnerability in the implementation of Network Address Translation NAT functionality in Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the improper translation of H.323 messages tha...

PT-2017-2993 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.4 through 15.6 Description: A vulnerability in the implementation of Network Address Translation NAT functionality could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2017-27427)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. An attacker could exploit the vulnerability to...

RTPproxy Denial of Service Vulnerability

RTPproxy is a software proxy. A security vulnerability exists in the NAT feature of RTPproxy 2.2.alpha.20160822 and earlier versions, which stems from the program failing to properly identify the IP address and port number of a legitimate recipient of RTP traffic. An attacker can exploit this...

UBUNTU-CVE-2017-14099

In res/resrtpasterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data disclosure media takeover in the RTP stack is possible with careful timing by an attacker. The...

Schweitzer Engineering Laboratories SEL-3620 and SEL-3622 Security Gateway Unauthorized Access Vulnerability

Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway are both security gateway products from Schweitzer Engineering Laboratories SEL, USA. A security vulnerability exists in the SEL SEL-3620 and SEL-3622 Security Gateway due to a failure to properly enforce access contro...

Network outage and performance degradation after you install WMF 5.1 in Windows Server 2012 R2

Network outage and performance degradation after you install WMF 5.1 in Windows Server 2012 R2 Symptoms Assume that you use a Hyper-V Network Virtualization HNV Gateway with Routing and Remote Access Service RRAS clusters on a Windows Server 2012 R2-based server. After you install Windows...

Provisioning Services Target Device Boots Up with BSOD 0xBC

Provisioning Services targets randomly start up to the Windows splash screen and stop at blue screen 0x000000BC. This error translates to a duplicate network address...

Update Rollup 8 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 8 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions for...

CVE-2016-5745

F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2 allow remote attackers to modify or extract system configuration files vi...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2016-08390)

Cisco IOS XE is an operating system developed by Cisco for its network devices.Network Address Translation NAT is one of the network address translation functions. A denial of service vulnerability exists in the implementation of the NAT feature in Cisco IOS XE Software. A remote attacker could...

Cisco Adaptive Security Appliance Xlates Table Exhaustion Vulnerability (Cisco-SA-20130226-CVE-2013-1138)

Cisco Adaptive Security Appliance ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Vulnerability of Cisco IOS software, which allows a malicious actor to trigger a service failure

The vulnerability in the TCP Input module of Cisco IOS, when NAT is used, allows malicious actors remotely to trigger service failures excessive memory consumption or device reboots by using specially crafted TCP packets...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the NAT service, which allows a remote attacker to cause a router to generate a “service failure” by manipulating IP and SIP packets...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

A bug in the Application Layer Gateway ALG module of the Cisco IOS operating system allows a remote attacker to reboot the device by using a specially crafted DNS packet with NAT enabled...

Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability

A vulnerability in the processing of IPv4 packets that require Network Address Translation NAT and Multiprotocol Label Switching MPLS services of Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4300 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers could allo...

USN-2890-2: Linux kernel (Wily HWE) vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

USN-2889-2 linux-lts-vivid vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2889-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2889-2 advisory. It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollc...

Cisco IOS XE Network Address Translation and Multiprotocol Label Switching DoS (CSCut96933)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for Network Address Translation NAT and/or Multiprotocol Label Switching MPLS. It is, therefore, affected by a flaw in the NAT and MPLS services due to improper processing of IPv4 packets. An...