642 matches found
CVE-2020-11913
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read...
CVE-2020-11899
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read...
CVE-2020-11902
The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read...
CVE-2020-0594
Out-of-bounds read in IPv6 subsystem in IntelR AMT and IntelR ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
PT-2020-4047 · Intel · Intel Ism +1
Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 14.0.33 Description: The issue is related to an out-of-bounds read in the IPv6 subsystem, which may allow an unauthenticated user to potentially enable denial of service via network access. This can b...
UBUNTU-CVE-2020-12390
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox 76...
CVE-2020-3191
A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...
kernel: some ipv6 protocols not encrypted over ipsec tunnel
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...
At 21 Tbps, Reaching New Levels of IPv6 Traffic
The global adoption of IPv6 is important to the future of the internet and Akamai has been committed to helping move IPv6 deployment forward ever since we launched production IPv6 support in 2012...
E-Series SANtricity OS Controller Software Denial of Service Vulnerability
E-Series SANtricity OS Controller Software is a disk array OS controller. A security vulnerability in E-Series SANtricity OS Controller Software IPV6 processing allows remote attackers to exploit the vulnerability by submitting a special request, which can be used in a denial-of-service attack...
Juniper Networks Junos OS JDHCPD Command Injection Vulnerability
Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv6 request that can be...
The vulnerability of VMware Workstation and VMware Fusion, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of VMware Workstation and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted IPv6 packet...
CVE-2019-5535
VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7...
Cisco IOS XE UTD Denial of Service Vulnerability
Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the Unified Threat Defense UTD feature of Cisco IOS XE. The vulnerability stems from improper authentication of IPv6 packets by the UTD...
CVE-2019-0037
In a Dynamic Host Configuration Protocol version 6 DHCPv6 environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causin...
The vulnerability of the SetStaticRouteIPv6Settings() function in D-Link’s router software allows a hacker to execute arbitrary code.
The vulnerability of the SetStaticRouteIPv6Settings function in D-Link’s microprogrammed router software is related to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco Application Policy Infrastructure Controller Access Control Error Vulnerability
Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. An access control error vulnerability exists in the management interface in Cisco APIC, which stems from the program's lack of an access control mechanism for IPv6...
The vulnerability of JunOS operating system’s network firewall filter, allowing a hacker to execute arbitrary code
The vulnerability of JunOS’s network firewall filter is related to errors in the processing of IPv6 packets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted IPv6 packet...
PT-2019-10115
Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions 0.12.0 through 0.17.1 Bitcoin Knots versions 0.12.0 through 0.17.x before 0.17.1.knots20181229 Description: The issue allows local users to exploit Incorrect Access Control, potentially leading to currency theft. This is...
CVE-2019-0005
On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...