15278 matches found
CVE-2020-26142
A flaw was found in the Linux kernel, where the WiFi implementations treat fragmented frames as full frames. This flaw allows an attacker to inject arbitrary network packets independent of the network configuration. The highest threat from this vulnerability is to integrity. Mitigation Mitigation...
The vulnerability of the Libraries component in Java SE, Java SE Embedded, and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to create, delete, or alter access to critical data.
The vulnerability of the Libraries component in Java SE, Java SE Embedded, and Oracle GraalVM Enterprise Edition software platforms exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to create, delete, or alter access to critical data using netwo...
PT-2021-3379 · Linux +3 · Xen-Netback +3
Name of the Vulnerable Software and Affected Versions: Linux xen-netback affected versions not specified Description: A use-after-free issue exists in Linux xen-netback due to insufficient input validation. This can be triggered by a malicious or buggy network PV frontend sending a malformed...
Cisco NX-OS Software Unidirectional Link Detection DoS / Code Execution (cisco-sa-nxos-udld-rce-xetH6w35)
An arbitrary code execution or denial of service DoS vulnerability exists in Unidirectional Link Detection UDLD feature of Cisco NX-OS Software due to insufficient input validation. An unauthenticated, adjacent attacker can exploit this issue by sending crafted Cisco UDLD protocol packets to a...
The vulnerability of the Libraries component in Java SE, Java SE Embedded, and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to create, delete, or alter access to critical data.
The vulnerability of the Libraries component in Java SE, Java SE Embedded, and Oracle GraalVM Enterprise Edition software platforms exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to create, delete, or alter access to critical data using netwo...
The vulnerability of the Pre Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to modify data or gain privileged access.
The vulnerability of the Pre Login component of the Oracle FLEXCUBE Direct Banking system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain privileged access using network packets...
kernel: remote DoS in TIPC kernel module
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization...
kernel: remote DoS in TIPC kernel module
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization...
unbound: assertion failure and denial of service in dname_pkt_copy via an invalid packet
A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server. The highest threat from this vulnerability is to service availability...
unbound: assertion failure and denial of service in synth_cname
A flaw was found in unbound. A reachable assertion in the synthcname function can be triggered by sending invalid packets to the server. If asserts are disabled during compilation, this issue might lead to an out-of-bounds write in dnamepktcopy function. The highest threat from this vulnerability...
CVE-2002-2438
TCP firewalls could be circumvented by sending a SYN Packets with other flags like e.g. RST flag set, which was not correctly discarded by the Linux TCP stack after firewalling...
CVE-2002-2438
TCP firewalls could be circumvented by sending a SYN Packets with other flags like e.g. RST flag set, which was not correctly discarded by the Linux TCP stack after firewalling...
PT-2021-8285 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue allows TCP firewalls to be circumvented by sending SYN packets with other flags set, such as the RST flag, which is not correctly discarded by the Linux TCP stack after firewalling...
MikroTik RouterOS Assertion Failure Vulnerability
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS suffers from an assertion failure vulnerability in the btest process. An authenticated, remote...
[SECURITY] Fedora 33 Update: python-impacket-0.9.22-3.fc33
Impacket is a collection of Python classes focused on providing access to network packets. Impacket allows Python developers to craft and decode netw ork packets in simple and consistent manner. It is highly effective when used in conjunction with a packet capture utility or package such as Pcapy...
[SECURITY] Fedora 34 Update: python-impacket-0.9.22-3.fc34
Impacket is a collection of Python classes focused on providing access to network packets. Impacket allows Python developers to craft and decode netw ork packets in simple and consistent manner. It is highly effective when used in conjunction with a packet capture utility or package such as Pcapy...
[SECURITY] Fedora 32 Update: python-impacket-0.9.22-3.fc32
Impacket is a collection of Python classes focused on providing access to network packets. Impacket allows Python developers to craft and decode netw ork packets in simple and consistent manner. It is highly effective when used in conjunction with a packet capture utility or package such as Pcapy...
WAGO Unauthorized Access Vulnerability
WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in WAGO. The vulnerability arises from unauthorized acces...
