ALPINE-CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

CVE-2017-6156

When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. The attacker must possess the necessary...

CVE-2017-6610

A vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to insufficient validation of the IKEv1 XAUTH parameters passed during an IKEv1 negotiation...

The vulnerability of Cisco PIX software allows a malicious individual to trigger a service failure.

The vulnerability in Cisco’s PIX network interface controller, when operating as a VPN client, allows malicious actors to trigger a service failure disabling the IPSec tunnel by sending a phase 1 negotiation request to the external network interface of the PIX...

PT-2015-7775 · Libraw +3 · Libraw +3

Name of the Vulnerable Software and Affected Versions: Libraw versions prior to 0.17.1 Description: The issue is related to memory object initialization in the phase one correct function, which can cause memory errors and potentially allow attackers to execute arbitrary code. Recommendations: For...

UBUNTU-CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

Google Picasa 'Phase One Tags' Buffer Overflow Vulnerability - Windows

Google Picasa is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:picasa";...

Google Picasa Heap Buffer Overflow Vulnerability

Google Picasa is a suite of applications for organizing and editing digital photos. An integer overflow vulnerability exists in Google Picasa 3.9.140 Build 239,Build 248, which can be exploited by a remote attacker to execute arbitrary code after triggering a heap buffer overflow with data relate...

CVE-2015-8096: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-based buffer overflow...

PT-2015-7728

Name of the Vulnerable Software and Affected Versions Google Picasa version 3.9.140 Build 239 Google Picasa version 3.9.140 Build 248 Description The issue is related to an integer overflow that triggers a heap-based buffer overflow, potentially allowing remote attackers to execute arbitrary code...

Google Picasa 'phase one' tag integer overflow vulnerability

Google Picasa is a set of free image management tools. An integer overflow vulnerability exists in Google Picasa 'phase one' tag handling. A remote attacker can exploit this vulnerability to construct a malicious file and trick the application into parsing it, which could crash the application or...

ipsec-tools: racoon orphaned ph1s memory leak

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

PT-2006-4752 · Cisco · Cisco Ios +3

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions affected versions not specified VPN 3000 Concentrators versions affected versions not specified PIX firewalls versions affected versions not specified Description: The issue concerns the Internet Key Exchange IKE version 1...

racoon fails to verify signature during Phase 1

Ralf Spenneberg discovered a serious flaw in racoon. When using Phase 1 main or aggressive mode, racoon does not verify the client's RSA signature. Any installations using X.509 authentication are strongly urged to upgrade. Installations using pre-shared keys are believed to be unaffected...