Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2563-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2563-1 advisory. Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote...

USN-2563-1: Linux kernel vulnerabilities

Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...

USN-2562-1: Linux kernel (Trusty HWE) vulnerabilities

Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...

Cisco ASR1000 Series Router Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 fails to properly handle routing neighbor announcements. an unauthenticated attacker sending malicious IP packets to the...

Ubuntu 14.10 : linux vulnerabilities (USN-2546-1)

A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges. CVE-2013-7421 A flaw was...

RIP-1 Poisoning Routing Table

This host is running a RIP-1 agent. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

kernel security and bug fix update

2.6.32-504.12.2 - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 2.6.32-504.12.1 - fs splice: perform generic write checks Eric Sandeen 1163798 1155900 CVE-2014-7822 2.6.32-504.11.1 - virt kvm: excessive pages un-pinning in...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 10279)

wireshark has been updated to version 1.10.12 to fix six security issues : - The WCCP dissector could crash. bnc912365. CVE-2015-0559 / CVE-2015-0560 - The LPP dissector could crash. bnc912368. CVE-2015-0561 - The DEC DNA Routing Protocol dissector could crash. bnc912369. CVE-2015-0562 - The SMTP...

[SECURITY] Fedora 21 Update: rubygem-actionpack-4.1.5-2.fc21

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

openSUSE Security Update : wireshark (openSUSE-SU-2015:0113-1)

This update fixes the following security issues : + The WCCP dissector could crash wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 boo912365 + The LPP dissector could crash. wnpa-sec-2015-02 CVE-2015-0561 boo912368 + The DEC DNA Routing Protocol dissector could crash. wnpa-sec-2015-03 CVE-2015-0562...

Juniper Junos Fragmented OSPFv3 Packet DoS (JSA10668)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability when processing fragmented OSPFv3 packets with an IPsec Authentication Header AH. A remote attacker on an adjacent network can exploit this issue to crash the kernel,...

Juniper Networks Junos OS BGP FlowSpec Denial of Service Vulnerability

Junos OS with BGB FlowSpec enabled are vulnerable to a Denial of Service attack. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cacti monitoring system injection vulnerability trigger the bloodshed-vulnerability warning-the black bar safety net

Preface: Security is a whole, any one of the short Board will cause Safety accident, from the border network to the IDC operation and maintenance of the network to the office network, are the whole of each of the network cannot be ignored. Enterprise in for security to do a multi-layer protection...

Juniper Junos BGP FlowSpec rpd DoS (JSA10670)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improperly processing a malformed BGP Flow Specification FlowSpec prefix. A remote attacker can exploit this issue to crash the routing process daemon rpd. Note...

Tribler - Download Torrents using Tor-inspired onion routing

Tribler is a research project of Delft University of Technology. Tribler was created over nine years ago as a new open source Peer-to-Peer file sharing program. During this time over one million users have installed it successfully and three generations of Ph.D. students tested their algorithms i...

Juniper Junos Remote Denial of Service Vulnerability (CNVD-2015-00383)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. Juniper Networks JUNOS fails to properly handle the BGP FlowSpec prefix, allowing an attacker to crash a routing program that can trigger assertion errors...

Wireshark Multiple Denial-of-Service Vulnerabilities -01 (Jan 2015) - Mac OS X

Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[ MDVSA-2015:022 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:022 http://www.mandriva.com/en/support/security/ Package : wireshark Date : January 12, 2015 Affected: Business Server 1.0 Problem Description: Updated wireshark packages fix security vulnerabilities: The DE...

Wireshark 1.10.x < 1.10.12 / 1.12.x < 1.12.3 Multiple DoS Vulnerabilities

The remote Windows host has a version of Wireshark installed that is 1.10.x prior to 1.10.12 or 1.12.x prior to 1.12.3. It is, therefore, affected by multiple denial of service vulnerabilities in the following dissectors : - DEC DNA Routing CVE-2015-0562 - LPP CVE-2015-0561 - SMTP CVE-2015-0563 -...

DEBIAN-CVE-2015-0562

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service application crash via a crafted packet, related to the use of...