15279 matches found
Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV DoS Vulnerability (cisco-sa-20190306-nxos-npv-dos)
According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability exists in Fibre Channel over Ethernet N-port Virtualization due to incorrect processing of FCoE packets. An unauthenticated, adjacent attacker can exploit this issue, via sending a...
Cisco IOS XE Software IPsec VPN DoS (cisco-sa-iosxe-vpn-dos-edOmW28Z)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the hardware crypto driver due to insufficient verification of authenticity of received Encapsulating Security Payload ESP packets. An attacker could exploit this vulnerability by...
SUSE-SU-2020:1511-2 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. - CVE-2020-2755: Fixed an...
CVE-2020-5596
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a...
CVE-2020-5600
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a resource management error vulnerability, which may allow a remote attacker to stop the network functions of the products...
CVE-2020-9395
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...
Security update for ntp (moderate)
openSUSE Security Update: Security update for ntp Announcement ID: openSUSE-SU-2020:0934-1 Rating: moderate References: 1125401 1169740 1171355 1172651 1173334 992038 Cross-References: CVE-2018-8956 CVE-2020-11868 CVE-2020-13817 CVE-2020-15025 Affected Products: openSUSE Leap 15.1 An update that...
Wireshark GVCP dissector denial of service vulnerability
Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.GVCP dissector is one of the GigE Visual Control Protocol parsers. A security vulnerability exist...
PT-2020-5908 · Apache · Apache Guacamole
Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 1.1.0 and older Description: The issue is related to the mishandling of pointers involved in processing data received via RDP static virtual channels. If a user connects to a malicious or compromised RDP server, a...
Cisco Firepower Threat Defense Software OSPF LSA Packets Processing DoS (cisco-sa-20191002-asa-ospf-lsa-dos)
According to its self-reported version, the Cisco Firepower Threat Defense FTD software installed on the remote host is affected by a vulnerability in the Open Shortest Path First OSPF implementation due to incorrect processing of certain OSPF packets. An unauthenticated, adjacent attacker can...
SUSE-SU-2020:1805-1 Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service bsc1169740. - CVE-2018-8956: Fixed an issue which could have...
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
Mainstream European bank hit by largest ever PPS based DDoS attack
By Waqas The DDoS attack on the bank was recorded in packets-per-second Pps and... This is a post from HackRead.com Read the original post: Mainstream European bank hit by largest ever PPS based DDoS attack...
Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20171213-01-ike)
Some Huawei products have a buffer overflow vulnerability due to incomplete range checks of the input data. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
ntp: DoS on client ntpd using server mode packet
A flaw was found in the Network Time Protocol NTP, where a security issue exists that allows an off-path attacker to prevent the Network Time Protocol daemon ntpd from synchronizing with NTP servers not using authentication. A server mode packet with a spoofed source address sent to the client nt...
DEBIAN-CVE-2020-11099
In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...
UBUNTU-CVE-2020-11099
In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...
The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...
Mitsubishi Electric MC Works64 Code Issue Vulnerability
Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A code issue vulnerability exists in Mitsubishi Electric MC Works64 4.02C 10.95.208.31 and prior versions, which can be exploited by a remote attacker to execute code and cause a denia...