5078 matches found
Cisco IOS XR Software Route Processor Denial of Service Vulnerability
Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the "Affected Products" section of this advisory. The vulnerability is due to improper...
CVE-2013-4125
The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for...
UBUNTU-CVE-2013-4125
The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for...
Oracle Linux 5 : kernel (ELSA-2010-0046)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0046 advisory. - firewire ohci: handle receive packets with zero data Jay Fenlason 547241 547242 CVE-2009-4138 - fs respect flag in docoredump Danny Feng 544188 54418...
CVE-2013-1136
The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...
Design/Logic Flaw
The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...
CVE-2013-1136
The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...
CVE-2013-1136
The CVE-2013-1136 entry describes a local denial-of-service vulnerability in Cisco IOS on the Aggregation Services Router (ASR) Route Processor 2 where improper memory management of the crypto engine allows a local attacker to crash the route processor by creating multiple tunnels and then inspec...
Route Parameter Injection Via Query String in Zend\Mvc
More info at https://framework.zend.com/security/advisory/ZF2013-01...
FreeSWITCH Route Header Value Handling DoS
According to its self-reported version, the remote FreeSWITCH install is affected by a denial of service vulnerability in the Sofia SIP stack. A remote attacker can exploit this, via a specially crafted INVITE request with a 'Route' value containing a long list, to crash the service. %NASLMINLEVE...
CVE-2012-5316
Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...
(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)
The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...
Fedora Update for quagga FEDORA-2012-9103
Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9103 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Cisco IOS MallocLite BGP Update DoS
The remote Cisco IOS device is affected by a denial of service vulnerability due to a flaw in the MallocLite implementation. A remote attacker, via a BGP update message with a specially crafted local-preference attribute length, can cause the route processor to crash, resulting in a denial of...
CVE-2012-1367
The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...
Quagga < 0.99.21 BGP Denial of Service Vulnerability
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. Unauthenticated attackers on the local network can trigger this issue by leveraging a BGP peering relationship and sending a...
Fedora Update for quagga FEDORA-2012-9116
Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9116 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 17 Update: quagga-0.99.21-2.fc17
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
[SECURITY] Fedora 15 Update: quagga-0.99.20.1-2.fc15
Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...
[SECURITY] Fedora 16 Update: quagga-0.99.21-2.fc16
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...