436 matches found
CVE-2015-6243
The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the 1 dissectorgetstringhandle and 2...
Fortinet FortiMail < 4.3.7 / 5.0.x < 5.0.2 Fragmented IPv6 Packet Handling DoS
The version of Fortinet FortiMail installed on the remote host is prior to 4.3.7 / 5.0.2. It is, therefore, affected by a denial of service vulnerability due to improper handling of fragmented IPv6 packets. A remote attacker can exploit this to crash the kernel, resulting in rebooting the device...
SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1304-1)
bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packe...
SUSE-SU-2015:1316-1 Security update for bind
bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...
SUSE-SU-2015:1305-1 Security update for bind
bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...
Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of the RDP service on the Windows operating system is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets remotely...
MGASA-2015-0152 Updated ntp packages fix security vulnerabilities
Updated ntp packages fix security vulnerabilities: The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting th...
OpenVPN 2.x < 2.2.3 / 2.3.6 Control Channel Packet Handling DoS
According to its self-reported version number, the version of OpenVPN installed on the remote host is affected by an error related to 'Control Channel Packet' handling and TLS-authenticated clients that could allow denial of service attacks. C Tenable Network Security, Inc. include"compat.inc"; i...
Design/Logic Flaw
The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 9.3.2 and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCuq68888...
F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K15868)
CVE-2013-4074 The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application...
PT-2014-5296
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.3.2 and earlier Description The issue is related to the SSL VPN implementation, which does not properly allocate memory blocks during HTTP packet handling. This allows remote attackers ...
Cisco IOS XR Software IPv6 Packet Handling Denial of Service Vulnerability (cisco-sa-20140611-ipv6)
Cisco IOS XR is prone to a remote denial of service DoS vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
openssl: DTLS packet processing double free
A flaw was discovered in the way OpenSSL handled DTLS packets. A remote attacker could use this flaw to cause a DTLS server or client using OpenSSL to crash or use excessive amounts of memory...
7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities
No description provided by source. $Id: igss9misc.rb 12779 2011-05-31 14:33:19Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
AGEphone 1.28/1.38 SIP Packet Handling Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet. AGEphone versions 1.24 and...
openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0352-1)
A rogue dhcp server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the dhcp client needs to sanitize the host name offered by the server CVE-2011-0996. This update also fixes...
Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability
A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cisco TelePresence CVE-2013-3378 Software Malformed SIP Packet Handling Remote DoS
According to the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69049;...
Cisco TelePresence CVE-2013-3377 Malformed SIP Packet Handling Remote DoS
According the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69048;...
CVE-2013-1581
The dissectpftfecdetailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service loop via a malformed packet...