The vulnerability of the RSLinx Classic communication server arises from the execution of operations beyond the buffer boundaries in memory, allowing attackers to cause service failures.

The vulnerability of the RSLinx Classic communication server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending a specially crafted CIP packet to port 44818...

The vulnerability of the Extensible Authentication Protocol over LAN (EAPOL) implementation in microprogrammable routering software from Cisco’s Small Business 100 Series and Cisco Small Business 300 Series allows a perpetrator to induce a service failure.

The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in microprogramming-based router software from Cisco’s Small Business 100 Series and Cisco Small Business 300 Series models is related to errors in processing EAPOL frames. Exploiting this vulnerability allo...

The vulnerability of the Fast Transition function in the 802.11r access point implementation of Cisco IOS Access Points allows a attacker to cause a service failure.

The vulnerability of the Fast Transition function in the 802.11r access point implementation of Cisco IOS Access Points is caused by errors in the timer mechanisms when processing certain networking events. Exploiting this vulnerability allows an attacker to cause service failure by sending...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K45325728)

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5533 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produce a corefile,...

F5 Networks BIG-IP : BIG-IP APM per-request policy object vulnerability (K27391542)

A remote attacker through undisclosed measures, may be able to exploit a virtual server configured with a BIG-IP APM per-request policy object and cause a memory leak in the BIG-IP APM module. CVE-2018-5536 Impact This vulnerability allows a disruption of service. C Tenable Network Security, Inc...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K64552448)

Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5534 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produc...

F5 Networks BIG-IP : Linux kernel vulnerability (K61223103)

The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket...

F5 Networks BIG-IP : TMM vulnerability (K10930474)

Malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure. CVE-2017-6155 Impact An attacker may be able to disrupt traffic or cause the BIG-IP system ...

kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment()

A security flaw was found in the ipfragreasm function in net/ipv4/ipfragment.c in the Linux kernel which can cause a later system crash in ipdofragment. With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash remotely, thus leading to a remote...

The vulnerability of the XML file analyzer in the libxml2 library allows a hacker to trigger a service failure.

The vulnerability of the XML file analyzer in the libxml2 library arises from insufficient restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted XML document...

The vulnerability of the xmlStringLenDecodeEntities function (parser.c) in the libxml2 library allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the xmlStringLenDecodeEntities function in the parser.c file of the libxml2 library is due to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or disclose protected informati...

The vulnerability of the web interface of the microprogramming software-based network interface cards Cisco RV110W Wireless-N VPN and the multi-functional VPN routers Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the web interfaces of Cisco RV110W Wireless-N VPN and Cisco RV130W Wireless-N, as well as Cisco RV215W Wireless-N VPN microprogramming-based network interface devices, is related to buffer overflow attacks in memory. Exploiting this vulnerability can allow an attacker to...

Unspecified Vulnerability in Oracle Fusion Middleware Identity Manager

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Identity Manager is one of the enterprise identity management system components. An unspecifi...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30952)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Sudo subcomponent of the Solaris component of the Oracle Sun Systems Products Suite, version...

CVE-2018-3266

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Verified Boot. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3179

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware subcomponent: Advanced Console. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from privilege management errors, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is caused by privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

The vulnerability in the implementation of the SMB network protocol of the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Microsoft Server Message Block SMB network protocol in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted SMB requests to the...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19573)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in 'wmananrspeventhandler' in Android. An attacker could exploit the vulnerability to execute arbitrary code or cause a denial of service...

Apache SpamAssassin Denial of Service Vulnerability

Apache SpamAssassin is a U.S. Apache Apache company's mail filtering program and API, can effectively prevent mail from spam harassment. A denial of service vulnerability exists in Apache SpamAssassin. An attacker can exploit the vulnerability to cause a denial of service...