SUSE CVE-2005-3858

Memory leak in the ip6inputfinish function in ip6input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed...

SUSE CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

SUSE CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

SUSE CVE-2006-1933

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...

SUSE CVE-2006-2069

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

SUSE CVE-2006-4805

epan/dissectors/packet-xot.c in the XOT dissector dissectxotpdu in Wireshark formerly Ethereal 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service memory consumption and crash via an encoded XOT packet that produces a zero length value when it is decoded...

SUSE CVE-2006-6235

A "stack overwrite" vulnerability in GnuPG gpg 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory...

SUSE CVE-2006-7180

ieee80211output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information related to network structure, and possibly cause a denial of service disrupted authentication and conduct spoofing attacks...

SUSE CVE-2007-0062

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 befor...

SUSE CVE-2007-1365

Buffer overflow in kern/uipcmbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this was originally reported as a denial of service...

SUSE CVE-2007-1496

nfnetlinklog in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service crash via unspecified vectors involving the 1 nfulnlrecvconfig function, 2 using "multiple packets per netlink message", and 3 bridged packets, which trigger a NULL pointer dereference...

SUSE CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

SUSE CVE-2007-2829

The 802.11 network stack in net80211/ieee80211input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service system hang via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference...

SUSE CVE-2007-5135

Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...

SUSE CVE-2008-0597

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

SUSE CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

SUSE CVE-2008-1072

The TFTP dissector in Wireshark formerly Ethereal 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service crash or memory consumption via a malformed packet, possibly related to a Cairo library bug...

SUSE CVE-2008-1561

Multiple unspecified vulnerabilities in Wireshark formerly Ethereal 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service application crash via a malformed packet to the 1 X.509sat or 2 Roofnet dissectors. NOTE: Vector 2 might also lead to a hang...

SUSE CVE-2008-2543

The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote...

SUSE CVE-2008-3145

The fragmentaddwork function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service crash via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read...