Cisco ASA < 8.7(1.18) IKEv1 and IKEv2 UDP Packet Handling RCE (cisco-sa-20160210-asa-ike)

Binary data 801948.prm...

Cisco ASA < 9.0(4.38) IKEv1 and IKEv2 UDP Packet Handling RCE (cisco-sa-20160210-asa-ike)

Binary data 801949.prm...

Cisco ASA < 9.1(7) IKEv1 and IKEv2 UDP Packet Handling RCE (cisco-sa-20160210-asa-ike)

Binary data 801950.prm...

Cisco ASA < 9.2(4.5) IKEv1 and IKEv2 UDP Packet Handling RCE (cisco-sa-20160210-asa-ike)

Binary data 801951.prm...

Cisco ASA < 9.5(2.2) IKEv1 and IKEv2 UDP Packet Handling RCE (cisco-sa-20160210-asa-ike)

Binary data 801954.prm...

Cisco ASA Software IKEv1 and IKEv2 UDP Packet Handling RCE (cisco-sa-20160210-asa-ike)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch. It is, therefore, affected by a remote code execution vulnerability due to an overflow condition in the Internet Key Exchange IKE implementation. An unauthenticated, remote attacker can exploit this, via...

Juniper Junos RTSP Packet Handling flowd DoS (JSA10721)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Real Time Streaming Protocol Application Layer Gateway RTSP ALG implementation. An unauthenticated, remote attacker can exploit this, via a crafted RT...

PowerDNS Authoritative Server 3.4.4 / 3.4.5 / 3.4.6 Process Packet Handling DoS

According to its self-reported version number, the version of the PowerDNS Authoritative Server listening on the remote host is version 3.4.4, 3.4.5, or 3.4.6. It is, therefore, affected by a denial of service vulnerability due to an assertion flaw that is triggered when handling malformed packet...

CVE-2015-8734

The dissectnwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PowerDNS Authoritative Server 3.4.x < 3.4.6 distributor.hh Packet Handling DoS

According to its self-reported version number, the version of the PowerDNS Authorative Server listening on the remote host is version 3.4.x prior to 3.4.6. It is, therefore, affected by a denial of service vulnerability due to an unspecified flaw in 'pdns/distributor.hh' related to DNS packet...

Juniper Junos IPv6 Packet Handling mbuf Chain Corruption DoS (JSA10699)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw related to the processing of IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted IPv6 packet, to trigger an 'mbuf'...

Fortinet FortiOS 5.0.x < 5.0.8 Packet Handling DoS

The remote host is running a version of Fortinet FortiOS 5.0.x prior to 5.0.8. It is, therefore, affected by a denial of service vulnerability due to a failure to properly handle spoofed packets. An unauthenticated, remote attacker can exploit this to terminate arbitrary sessions. C Tenable Netwo...

CVE-2015-6243

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the 1 dissectorgetstringhandle and 2...

Fortinet FortiMail < 4.3.7 / 5.0.x < 5.0.2 Fragmented IPv6 Packet Handling DoS

The version of Fortinet FortiMail installed on the remote host is prior to 4.3.7 / 5.0.2. It is, therefore, affected by a denial of service vulnerability due to improper handling of fragmented IPv6 packets. A remote attacker can exploit this to crash the kernel, resulting in rebooting the device...

SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1304-1)

bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packe...

SUSE-SU-2015:1316-1 Security update for bind

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

SUSE-SU-2015:1305-1 Security update for bind

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the RDP service on the Windows operating system is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets remotely...

MGASA-2015-0152 Updated ntp packages fix security vulnerabilities

Updated ntp packages fix security vulnerabilities: The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting th...

OpenVPN 2.x < 2.2.3 / 2.3.6 Control Channel Packet Handling DoS

According to its self-reported version number, the version of OpenVPN installed on the remote host is affected by an error related to 'Control Channel Packet' handling and TLS-authenticated clients that could allow denial of service attacks. C Tenable Network Security, Inc. include"compat.inc"; i...