PT-2017-10803 · Go +3 · Net/Http Package +3

Name of the Vulnerable Software and Affected Versions: net/http package affected versions not specified Description: The issue arises when the net/http package's Request.ParseMultipartForm method handles large multipart requests, potentially leading to a denial-of-service situation. An attacker c...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20170321)

Security Fixes : - It was discovered that a remote attacker could leverage the generation of IPv6 atomic fragments to trigger the use of fragmentation in an arbitrary IPv6 flow in scenarios in which actual fragmentation of packets is not needed and could subsequently perform any type of a...

Cisco IOS XE Software Local Command Execution Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. The Cisco IOS XE Software startup script does not validate the value of the ROMMON variable effectively, allowing remote attackers to exploit the vulnerability by submitting a specia...

Moderate: Red Hat Security Advisory: kernel security and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Kernel security update: new kernel 2.6.32-042stab123.1, Virtuozzo 6.0 Update 12 Hotfix 7 (6.0.12-)

This update provides a new Virtuozzo 6.0 kernel 2.6.32-042stab123.1 as well as internal stability bug fixes. The new kernel is based on the Red Hat Enterprise Linux 6.9 kernel 2.6.32-696.el6 and provides security fixes. Vulnerability id: CVE-2017-6214 A flaw was found in the Linux kernel's handli...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2017:0817 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Cisco IOS ANI Registrar DoS (cisco-sa-20170320-ani)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Autonomic Networking Infrastructure ANI registrar feature due to incomplete input validation of certain crafted packets. An unauthenticated, adjacent...

Cisco IOS XE ANI IPv6 Packets DoS (cisco-sa-20170320-aniipv6)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Autonomic Networking Infrastructure ANI component due to incomplete input validation of certain crafted IPv6 packets. An unauthenticated, remote...

Cisco IOS XE ANI Registrar DoS (cisco-sa-20170320-ani)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Autonomic Networking Infrastructure ANI registrar feature due to incomplete input validation of certain crafted packets. An unauthenticated,...

Cisco IOS DHCP Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the DHCP client implementation of Cisco IOS. A remote attacker can exploit this vulnerability to send specially crafted DHCP messages to conduct denial-of-service attacks...

RedHat Update for kernel RHSA-2017:0817-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : kernel (RHSA-2017:0817)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Cisco IOS and IOS XE Software ANI Registration Function Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco in the United States for its network devices. The Autonomic Networking Infrastructure ANI registration feature in Cisco IOS and IOS XE Software fails to adequately filter packets. A remote attacker could exploit the...

Cisco IOS and IOS XE Software ANI IPv6 Message Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco in the United States for its network devices. The Autonomic Networking Infrastructure ANI feature in Cisco IOS and IOS XE Software fails to adequately filter packets. A remote attacker could exploit the vulnerability by...

CVE-2017-3849

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

CVE-2017-3850

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software 15.4 through 15.6 and Cisco IOS XE Software 3.7 through 3.18, and 16 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete inpu...

Input validation

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

CVE-2017-3849

Cisco IOS and IOS XE ANI Registrar Denial of Service (CVE-2017-3849) affects the Autonomic Networking Infrastructure (ANI) registrar feature in Cisco IOS/IOS XE where incomplete input validation of crafted packets can be exploited by an unauthenticated, adjacent attacker. Conditions: device runs ...

CVE-2017-3849

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

kernel: net: Out of bounds stack read in memcpy_fromiovec

A flaw was found in the Linux networking subsystem where a local attacker with CAPNETADMIN capabilities could cause an out-of-bounds memory access by creating a smaller-than-expected ICMP header and sending to its destination via sendto...