Fedora 22 : kernel-4.1.10-200.fc22 (2015-dcc260f2f2)

kernel-4.1.10-200.fc22 - Linxu v4.1.10 - Add patch to fix soft lockups in network stack rhbz 1266691 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

VxWorks Fuzzing: VxWorks industrial real-time operating system vulnerability mining debugging with the use of secret-vulnerability warning-the black bar safety net

VxWorks is the world's most widely used method in the embedded system deployed in real timeoperating system, is composed of the United States WindRiver company referred to Wind River Corporation, i.e., the WRS company in 1 9 8 3 years in design and development. Their market ranges across all safe...

grub2 security, bug fix, and enhancement update

2.02-0.29.0.1 - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms bug 19231481 - update Oracle Linux certificates Alexey Petrenko - Put 'with' in menuentry instead of 'using' bug 18504756 - Use different titles for UEK and RHCK kernel...

Cisco Content Security Management Appliance TCP Flood DoS (CSCus79777)

According to its self-reported version, the Cisco Content Security Management Appliance SMA running on the remote host is affected by a denial of service vulnerability in the network stack of Cisco AsynOS due to improper handling of TCP packets sent at a high rate. An unauthenticated, remote...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2015-07404)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. There is a security vulnerability in the Cisco AsyncOS f network stack. a remote attacker sends a large number of TCP packets that consume system memory and perform a...

Cisco AsyncOS TCP Flood Denial of Service Vulnerability

A vulnerability in the network stack of Cisco AsyncOS for Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to exhaust all available memory, preventing the affected device from...

How to Perform Reverse Imaging on a Provisioning Services Target Device for Windows and its Applicable Usages

When a Provisioning Services Target Device for Windows is booted from Provisioning Services across the network, it is not possible to perform any software updates that affect the network stack, since the network stack changes will drop the connection to the vDisk. The following provides a list of...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2015:1359-1)

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed : - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

Cisco IOS XR LPTS Network Stack Remote Denial of Service Vulnerability

A vulnerability in the Local Packet Transport Services LPTS network stack of Cisco IOS XR for Cisco ASR9k could allow an unauthenticated, remote attacker to cause a limited denial of service DoS condition on an affected platform. The vulnerability is due to improper handling of flow base entries ...

Wedge WedgeOS Arbitrary Command Injection Vulnerability

Wedge WedgeOS is a network stack implementation. An arbitrary command injection vulnerability exists in Wedge WedgeOS, which allows remote attackers to execute arbitrary commands...

Wedge WedgeOS Arbitrary Command Execution Vulnerability

Wedge WedgeOS is a network stack implementation. An arbitrary command execution vulnerability exists in Wedge WedgeOS that could be exploited by a remote attacker to execute arbitrary commands...

Wedge WedgeOS Arbitrary File Read Vulnerability

Wedge WedgeOS is a network stack implementation. An arbitrary file read vulnerability exists in Wedge WedgeOS, which allows remote attackers to read arbitrary files...

SUSE-SU-2015:1359-1 Security update for libqt4

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed: - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

Code injection

The network stack in Cisco TelePresence MCU Software before 4.32.30 allows remote attackers to cause a denial of service memory consumption via crafted TCP packets, aka Bug ID CSCtz35468...

Cisco TelePresence MCU Software Memory Exhaustion Vulnerability

A vulnerability in the network stack of Cisco TelePresence MCU Software could allow an unauthenticated, remote attacker to cause the exhaustion of available memory which could lead to system instability and a reload of the affected system. Cisco has released software updates that address this...

VxWorks WDB Agent 远程内存读取漏洞

VxWorks安全初探 404@KnownSec --- 0x00 前言 --- 关于VxWorks，这里引用44CON议题《攻击 VxWorks：从石器时代到星际》探究 一文章中的介绍： VxWorks 是世界上使用最广泛的一种在嵌入式系统中部署的实时操作系统，是由美国WindRiver公司（简称风河公司，即WRS 公司）于1983年设计开发的。其市场范围跨越所有的安全关键领域，仅举几例，包括火星好奇心流浪者、波音787梦幻客机、网络路由器。这些应用程序的安全高危性质使得VxWorks的安全被高度关注。 VxWorks操作系统是由美国Wind...

TANDBERG vF8.2, F8.0, F7.2, and F6.3 - Remote Denial of Service

No description provided by source. Security Advisory Platform : TANDBERG Date : November 6, 2009 Affected : All MXP FIPS140 Current as of December 8, 2009 Tested : F8.2, F8.0, F7.2, F6.3 Unconf : VCS, BC, C90 Author : otokoyama Problem Description: Issues with the H.225 RAS implementation in...

Windows 98 ARP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3113/info A potential denial of service vulnerability exists in some versions of the Microsoft Windows network stack. The problem occurs when a large number of extraneous ARP packets sent to a host running Windows. This c...

MS Windows Vista - Forged ARP packet Network Stack DoS Exploit

No description provided by source. !/usr/bin/env python :: Kristian Hermansen :: Date: 20070514 Reference: CVE-2007-1531 Description: Microsoft Windows Vista SP0 dumps interfaces when it receives this ARP packet. This DoS is useful for an internet cafe, wireless venue, or legitimate local attack...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:1288-1)

java-170-openjdk was updated to icedtea-2.4.1 bnc828665 - Security fixes - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improv...