407 matches found
Siemens S7-300 Packet Handling Remote DOS
Binary data 151.prm...
USN-3976-2 samba vulnerability
USN-3976-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked S4U2Self packets. In certain environments, a remote attacker...
UBUNTU-CVE-2019-3900
An infinite loop issue was found in the vhostnet kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handlerx. It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stal...
CVE-2018-5734
The CVE-2018-5734 issue concerns ISC BIND where handling a malformed DNS request causes an assertion failure in badcache.c due to selecting SERVFAIL instead of FORMERR. Affected versions are BIND 9.10.5-S1 to 9.10.5-S4 and 9.10.6-S1/S2. The connected documents describe the root cause as an incorr...
CVE-2018-8493
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...
RHEL 7 : kernel (RHSA-2018:2785)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2785 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A flaw named SegmentSmack was found in...
CVE-2018-14827
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionali...
USN-3741-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault L1TF. A local attacker in a guest virtual machine could use this to expose sensitive...
Cisco SD-WAN Zero Touch Provisioning Denial of Service Vulnerability
Cisco vBond Orchestrator Software, vManage Network Management Software, and Smart Controller Software are all products of Cisco, Inc. Cisco vBond Orchestrator Software, vManage Network Management Software and Smart Controller Software are all Cisco products. cisco vBond Orchestrator Software and...
CVE-2018-5803
In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "sctpmakechunk" function net/sctp/smmakechunk.c when handling SCTP packets length can be exploited to cause a kernel crash...
CVE-2018-0297
A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer SSL Access Control AC policy to block SSL traffic. The vulnerability is due to the incorrect handling of TCP SSL packets...
skarg BACnet Protocol Stack Buffer Overflow Vulnerability
The skarg BACnet Protocol Stack is a set of data communication protocols for building automation and control networks. A buffer overflow vulnerability exists in the BACnet/IP BVLC packet handling of the bvlc.c file in version 0.8.5 of the skarg BACnet Protocol Stack, which stems from the program'...
Juniper Junos Connectionless Network Protocol (CLNP) Packet Handling Unspecified Remote Code Execution / DoS (JSA10844)
According to its self-reported version number, the remote Juniper Junos device is affected by an unspecified flaw that is triggered when handling Connectionless Network Protocol CLNP packets. This allows a remote attacker to crash a device or execute arbitrary code. Note: This issue is only...
Juniper Junos Routing Process Daemon (RPD) BGP UPDATE Packet Handling Unspecified Remote DoS (JSA10848)
According to its self-reported version number, the remote Junos device is affected by a remote denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109214; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
Juniper Junos VPLS Routing MPLS Packet Handling mbuf Exhaustion Remote DoS (JSA10845)
According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109211; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/20...
Juniper Junos IDP Policy Compilation Packet Handling Firewall Rule Bypass Remote Information Disclosure (JSA10846)
According to its self-reported version number, the remote Junos device is affected by an information disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109212; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...
Juniper Junos VPLS Routing MPLS Packet Handling mbuf Exhaustion Remote DoS (JSA10855)
According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. TRUSTED...
Juniper Junos MPLS Packet Handling Remote DoS (JSA10831)
According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106388; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/04/22...
QEMU Denial of Service Vulnerability (CNVD-2017-24371)
QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a denial of service vulnerability due to the program failing to properly clear pending packets. An attacker exploits the...
The vulnerability of the Android operating system from the CAF repository exists due to improper processing of RTP packets, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Android operating system from the CAF repository exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information during the processing of...