Cisco IOS XR Typhoon-based Line Cards and Network Processor (NP) Chip DoS

The remote Cisco device is running a version of Cisco IOS XR software that is affected by an error due to the improper processing of IPv4 packets routed through the bridge-group virtual interface BVI whenever Unicast Reverse Path Forwarding uRPF, policy-based routing PBR, quality of service QoS, ...

CVE-2015-0695

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface BVI traffic, which allows remote attackers to cause a denial of service chip and card hangs and reloads by triggering use of a BVI interface...

CVE-2015-0695

Cisco IOS XR Software on ASR 9000 (4.3.4–5.3.0) with uRPF, PBR, QoS, or ACLs enabled is vulnerable to BVI traffic handling flaw in the packet-processing path. The issue can allow a remote, unauthenticated attacker to cause a lockup and eventual reload of the network processor chip and line card w...

[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.4-4.fc20

Neutron is a virtual network service for Openstack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services e.g.,...

[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.3-13.fc20

Neutron is a virtual network service for Openstack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services e.g.,...

Multiple Vendor TCP Session Acknowledgement Number Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneous TCP acknowledgement number is...

Microsoft Windows 2000 - Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8397/info A problem has been identified in the RSVP Server for Microsoft Windows 2000 that may allow an attacker to hijack management of the network. This could allow an attacker control of network Quality of Service...

NETGEAR DGN2200 1.0.0.29_1.7.29_HotS - Stored XSS Vulnerability

No description provided by source. Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface Date 30/04/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://netgear.com Affected Firmware version: 1.0.0.291.7.29HotS Affected Hardware: NETGEAR DGN2200 Wireless ADSL Route...

[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.3-9.fc20

Neutron is a virtual network service for Openstack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services e.g.,...

Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20140527)

It was found that libvirt passes the XMLPARSENOENT flag when parsing XML documents using the libxml2 library, in which case all XML entities in the parsed documents are expanded. A user able to force libvirtd to parse an XML document with an entity pointing to a special file that blocks on read...

libvirt security and bug fix update

0.10.2-29.0.1.el65.8 - Replace docs/et.png in tarball with blank image 0.10.2-29.el65.8 - LSN-2014-0003: Don't expand entities when parsing XML CVE-2014-0179 - QoS: make tc filters match all traffic rhbz1096806 - use virBitmapFree instead of VIRFREE for cpumask rhbz1091206 - Properly free vcpupin...

Netgear DGN2200 Cross Site Scripting

Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface Date 30/04/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://netgear.com Affected Firmware version: 1.0.0.291.7.29HotS Affected Hardware: NETGEAR DGN2200 Wireless ADSL Router Summary ======= NETGEAR DGN2200...

NETGEAR DGN2200 1.0.0.29_1.7.29_HotS - Persistent Cross-Site Scripting

NETGEAR DGN2200 1.0.0.291.7.29HotS - Persistent Cross-Site Scripting Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface Date 30/04/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://netgear.com Affected Firmware version: 1.0.0.291.7.29HotS Affected Hardware:...

Fedora 20 : libvirt-1.1.3-2.fc20 (2013-18455)

Allow QoS change with update-device bz 1014200 - Fix nwfilter crash during firewalld install bz 1014762 - Fix crash with nographics bz 1014088 Update to 1.1.3 release - Sync with v1.1.2-maint - Rebuild for libswan soname bump bz 1009701 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz...

Microsoft Windows TCP/IP QOS Denial of Service (MS11-064; CVE-2011-1965)

A denial of service DoS vulnerability has been reported in Microsoft Windows TCP/IP stack...

D-Link DSL-2640U PPoE Data Disclosure (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

Denial of service

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

CVE-2011-1965

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

Microsoft Windows TCP/IP QOS CVE-2011-1965 Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to restart the affected system, therefore denying service to legitimate users. Technologies Affected Microsoft Windows 7 for 32-bit Systems Microsoft Windows 7 for 32-bit Systems...

MS11-064: Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894)

The TCP/IP stack in use on the remote Windows host is potentially affected by the following denial of service vulnerabilities : - By sending a sequence of specially crafted ICMP messages, an unauthenticated, remote attacker could cause the affected host to stop responding and automatically reboot...