CVE-2018-0030

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 FPC-P1, FPC-P2 line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper...

CVE-2017-10605

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...

Wireshark 'dissectors/asn1/ros/packet-ros-template.c' denial of service vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark 'dissectors/asn1/ros/packet-ros-template.c' has a denial of service...

SUSE-SU-2017:0461-1 Security update for openssl

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed: - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed bsc1019334 - CVE-2016-8610: A remote denial of service in S...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:0441-1)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed : - CVE-2016-7055: The x8664 optimized montgomery multiplication may produce incorrect results bsc1009528 - CVE-2017-3731: Truncated packet could crash via OO...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server component: The Optimizer component of the MySQL database management system is vulnerable due to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to...

Wireshark VeriWave Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. In Wireshark version 2.0.x before 2.0.1 and version 1.12.x before 1.12.9, wiretap/vwr.c in the VeriWave parser does not validate certain signatures and MCS data in a constructed packet, which can be exploited by a remote attacker to cause a...

MGASA-2015-0413 Updated ntp packages fixes security vulnerabilities

It was found that ntpd did not correctly implement the threshold limitation for the '-g' option, which is used to set the time without any restrictions. A man-in-the-middle attacker able to intercept NTP traffic between a connecting client and an NTP server could use this flaw to force that clien...

UBUNTU-CVE-2014-8710

The decompresssigcompmessage function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted packet...

Juniper Networks Junos OS RPD Denial of Service Vulnerability

DoS of RPD routing process SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

Mandrake Linux Security Advisory : ethereal (MDKSA-2004:152)

A number of vulnerabilities were discovered in Ethereal : - Matthew Bing discovered a bug in DICOM dissection that could make Ethereal crash CVE-2004-1139 - An invalid RTP timestamp could make Ethereal hang and create a large temporary file, possibly filling available disk space CVE-2004-1140 - T...

Squid SNMP Module asn_parse_header() Function Remote DoS

The remote Squid caching proxy, according to its version number, may be vulnerable to a remote denial of service attack. This flaw is caused due to an input validation error in the SNMP module, and exploitation requires that Squid not only was built to support it but also configured to use it. An...

GLSA-200406-01 : Ethereal: Multiple security problems

The remote host is affected by the vulnerability described in GLSA-200406-01 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.4, including: A buffer overflow in the MMSE dissector. Under specific conditions a SIP packet could make...

Mandrake Linux Security Advisory : ethereal (MDKSA-2004:024)

A number of serious issues have been discovered in versions of Ethereal prior to 0.10.2. Stefan Esser discovered thirteen buffer overflows in the NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP dissectors. Jonathan Heusser discovered that a carefully-crafted RADIUS packet could cause Etherea...

Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)

Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...

Fedora Core 1 : ethereal-0.10.3-0.1.1 (2004-152)

Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...

RHEL 2.1 : fetchmail (RHSA-2002:216)

Updated Fetchmail packages are available for Red Hat Linux Advanced Server which close a remotely-exploitable vulnerability in unpatched versions of Fetchmail prior to 6.1.0. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links such as SLIP and...

Enterasys XSR Security Routers DoS

Description: Enterasys XSR Security Routers crash when passing a packet with the option record route. System Vulnerable: This vulnerability was found in XSR-1800 series. firmware 7.0.0.0 Proof-of-concept: I've used Hping http://www.hping.org/ to perform this example: hping3 -1 -G www.uol.com.br...

CVE-2004-0221

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite...