Security Advisory - Several Vulnerabilities in H323 protocol of Huawei Products

There are two out-of-bounds read vulnerabilities in H323 protocol of Huawei products. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot. Vulnerability ID:...

Cisco IOS Denial of Service Vulnerability (CNVD-2017-34249)

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS. A local attacker could exploit this vulnerability to cause a denial of service device reboot...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

Race condition

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

Code injection

Cisco IOS before 12.233SXI allows remote authenticated users to cause a denial of service device reboot...

CVE-2010-3049

Cisco IOS before 12.233SXI allows local users to cause a denial of service device reboot...

CVE-2010-3050

Cisco IOS before 12.233SXI allows remote authenticated users to cause a denial of service device reboot...

Design/Logic Flaw

Cisco IOS before 12.233SXI allows local users to cause a denial of service device reboot...

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router allows a hacker to cause a service failure and reboot the device.

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failure and reboot the device by using an unauthorized GET request...

The vulnerability in the embedded microprogramming software of the IP-stack service for Huawei Campus series network switches models S2300, S2700, S3300, S3700, S5300EI, S5700EI, S5300SI, S5700SI, S5300HI, S5700HI, S6300EI, S6700EI, S5710HI, S5300LI, S5700LI, S2350EI, S2750EI, S5720HI, S7700, S9300, S9700 allows a intruder to cause service failure.

The vulnerability of the embedded microprogramming software of the IP-stack service for Huawei Campus series network switches, such as S2300, S2700, S3300, S3700, S5300EI, S5700EI, S5300SI, S5700SI, S5300HI, S5700HI, S6300EI, S6700EI, S5710HI, S5300LI, S5700LI, S2350EI, S2750EI, S5720HI, S7700,...

Cisco Small Business Managed Switches Denial of Service Vulnerability

Cisco Small Business 300 Series Managed Switches and so on are the switch equipment of the American Cisco Cisco company. the Secure Shell SSH subsystem is one of the data encryption transmission subsystems. A denial of service vulnerability exists in the SSH subsystem in several Cisco products,...

DEBIAN-CVE-2015-7837

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secureboot flag across kexec reboot...

CVE-2015-7837

CVE-2015-7837 affects the Linux kernel as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2. The issue is a security restriction bypass caused by improper handling of the secure_boot flag across a kexec reboot, allowing local users to bypass securelevel/secureboot restrictions. ...

CVE-2015-7837

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secureboot flag across kexec reboot...

CVE-2015-7837

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secureboot flag across kexec reboot...

DEBIAN-CVE-2017-14431

Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service ARM or x86 AMD host OS memory consumption by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207...

Cisco IoT Field Network Director Denial of Service Vulnerability

Cisco IoT Field Network Director is the software platform that manages the multiservice network of Cisco routers. A denial of service vulnerability exists in the TCP throttling process of Cisco IoT Field Network Director IoT-FND, which allows an unauthenticated, remote attacker to cause the syste...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2017-31981)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Linux kernel is one of the Qualcomm Linux kernels. A security vulnerability exists in the Qualcomm Linux kernel in Android. An attacker can exploit this...

IBM Notes Denial of Service Vulnerability

IBM Notes is a set of collaborative office software from IBM in the United States. The software has e-mail, calendar, scheduling and other office functions. A denial of service vulnerability exists in IBM Notes. An attacker can exploit this vulnerability by tricking a user into clicking on a...