CVE-2015-0645

Cisco IOS XE Layer 4 Redirect (L4R) DoS vulnerability affects IOS XE 2.x–3.x before certain fixed releases, where the L4R feature mishandles crafted IPv4/IPv6 packets. An unauthenticated, remote attacker can trigger a device reload by sending malformed traffic, per Bug ID CSCuq59131. Affected ran...

SUSE-SU-2015:0679-1 Security update for tcpdump

tcpdump was updated to fix five vulnerabilities in protocol printers When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities were fixed: IPv6 mobili...

CVE-2015-0654

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

FreeBSD : rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities (d08f6002-c588-11e4-8495-6805ca0b3d42)

Best Practical reports : RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...

CVE-2015-1545

The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...

MatrikonOPC Server for DNP3 < 1.2.3.1 Message Handling Remote DoS

Binary data scadamatrikonopcdnp3serverdos.nbin...

CVE-2015-1463

CVE-2015-1463 affects ClamAV prior to 0.98.6. A remote attacker can crash the daemon by feeding a specially crafted petite packer file, due to an issue described as an “incorrect compiler optimization.” The vulnerability is demonstrated in the CVE entry for ClamAV, and several advisories referenc...

Openswan < 2.6.37 Cryptographic Helper Use-After-Free Remote DoS

The remote host is running a version of Openswan prior to version 2.6.37. It is, therefore, affected by a remote denial of service vulnerability due to a use-after-free flaw in the cryptographic helper handler. A remote attacker can exploit this issue to cause a denial of service. C Tenable Netwo...

Juniper Junos MX Series BBE Routers jpppd Remote DoS (JSA10665)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Juniper PPP daemon jpppd. A remote attacker can exploit this issue by sending a specially crafted PAP Authenticate-Request after successful negotiation of the PPP...

Apache Traffic Server HTTP TRACE Request Remote DoS Vulnerability

Apache Traffic Server is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-9380

The dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service out-of-bounds read via a packet containing only a CVSLOGIN signature...

SuSE 11.3 Security Update : shim (SAT Patch Number 9997)

shim has been updated to fix three security issues : - OOB read access when parsing DHCPv6 packets remote DoS. CVE-2014-3675 - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE. CVE-2014-3676 - Memory corruption when processing user provided MOK lists...

Linux kernel multiple security vulnerabilities

Multiple KVM vulnerabilities, CIFS client DoS, remote DoS vulnerabilities, tracesyscalls privilege escalation and protection bypass...

CVE-2014-7815

The setpixelformat function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service crash via a small bytesperpixel value...

libpurple: remote dos and information leakage

A malicious server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory. A malicious server or man-in-the-middle could trigger a crash in libpurple by sending an emoticon via MXit with an...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series A <= 7 and Series B <= 15.000 DNP3 Remote DoS

Binary data 7147.pasl...

Race condition

Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...

Juniper Junos SRX Series ALG 'flowd' Remote DoS (JSA10650)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability related to ALG Application Layer Gateway. A remote attacker can exploit this issue by sending a specially crafted SIP packet to an SRX series device, resultin...

Juniper Junos BGP UPDATE 'rpd' Remote DoS (JSA10653)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP UPDATE messages using 4-byte AS numbers. A remote attacker can exploit this issue, by sending a specially crafted BGP UPDATE packet, to...

Juniper Junos RSVP 'rpd' Remote DoS (JSA10652)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of RSVP PATH messages. A remote attacker can exploit this issue, by sending a specially crafted RSVP packet, to crash the 'rpd' process. Note th...