Libreswan 'ikev2parent_inI1outR1()'函数远程拒绝服务漏洞

BUGTRAQ ID: 64984 CVECAN ID: CVE-2013-7294 Libreswan是Linux平台上的IPsec实现，支持很多IPsec扩展，包括IKEv2, X.509 Digital Certificates, NAT Traversal等。 Libreswan 3.7之前版本，programs/pluto/ikev2parent.c内的函数 ikev2parentinI1outR1 存在安全漏洞，可导致远程拒绝服务。此漏洞源于处理KE负载时，IKEv2 I1通知失败。 0 libreswan libreswan 3.6 厂商补丁： libreswan...

VMware Fusion 5.x < 5.0.1 VMX Process DoS (VMSA-2014-0001)

The version of VMware Fusion 5.x installed on the remote Mac OS X host is prior to 5.0.1. It is, therefore, reportedly affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Network Security, Inc...

Juniper Networks Junos OS Stack Exhaustion Denial of Service Vulnerability

Denial of Service vulnerability due to stack exhaustion in glibc used by Junos SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-6376

The recalculateapicmap function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service host OS crash via a crafted ICR write operation in x2apic mode...

Google Kills Privacy Feature

UPDATE: Google has removed a pivotal privacy feature from its Android operating system that gave users the ability to deny permissions in and regulate information collection attempts by installed applications. The feature, which users could control with a tool called AppOps Launcher, first appear...

Google Nexus Phones Vulnerable to SMS Denial-of-Service

Google is reportedly looking into a problem with the latest versions of Nexus smartphones that could force the devices to restart, lock or fail to connect to the Internet. All Galaxy Nexus, Nexus 4 and Nexus 5 devices that run Android 4.0 contain a flaw that can render the phones vulnerable to a...

Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability

A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

varnish -- DoS vulnerability in Varnish HTTP cache

Varnish Cache Project reports: If Varnish receives a certain illegal request, and the subroutine 'vclerror' restarts the request, the varnishd worker process will crash with an assert. The varnishd management process will restart the worker process, but there will be a brief interruption of servi...

CVE-2013-5580

The 1 ConnStartLogin and 2 cbReadResolverResult functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code for the HandleWrite function, which allows remote attackers to cause a denial of service assertion failure a...

Vino VNC Server 3.7.3 - Persistent Denial of Service

Exploit for linux platform in category dos / poc Product description: Vino is the GNOME desktop sharing server. Finding 1: Remote Persistent Denial of Service Vulnerability Credit: Jonathan Claudius of Trustwave SpiderLabs CVE: CVE-2013-5745 CWE: CWE-20 The Vino VNC server, which is also the...

[ MDVSA-2013:229 ] bzr

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:229 http://www.mandriva.com/en/support/security/ Package : bzr Date : September 10, 2013 Affected: Business Server 1.0 Problem Description: Updated bzr packages fix security vulnerabilities: A denial of...

CVE-2013-2212

The vmxsetucmode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service CPU consumption and possibly hypervisor or guest kernel panic via a crafted GFN range...

Comodo Internet Security Denial of Service Vulnerability-01

The host is installed with Comodo Internet Security and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcomododosvuln01win.nasl 6115 2017-05-12 09:03:25Z teissa $ Comodo Internet Security Denial of Service Vulnerability-01 Authors: Arun Kallavi Copyright: Copyright ...

Ubuntu Update for haproxy USN-1889-1

Check for the Version of haproxy OpenVAS Vulnerability Test $Id: gbubuntuUSN18891.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for haproxy USN-1889-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

pymongo DoS

NULL pointer dereference...

Internet Systems Consortium Resolves Critical BIND Flaw

The Internet Systems Consortium ISC published a security advisory yesterday resolving a high priority, remotely exploitable denial-of-service vulnerability in BIND 9, the de facto software standard for implementing domain name system protocols online. There is a defect in BIND 9 that could...

Upgrade ModSecurity to version 2.7.4 for fixing Denial of Service Vulnerability

ModSecurity is an open source web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. ModSecurity developers team recently fixed a vulnerability CVE-2013-2765 which could be exploited...

CVE-2013-1241

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service module reload via a series of malformed packets, aka Bug ID CSCub92025...

Sysax Multi Server SSH Component NULL Pointer Dereference DOS Vulnerability

The host is running Sysax Multi Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbsysaxmultiserversshdosvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Sysax Multi Server SSH Component NULL Pointer Dereference DOS Vulnerability Authors: Antu Sanadi Copyright:...

PT-2013-88: Denial of Service in Siemens SIMATIC S7-1200 CPU PLC

The specialists of the Positive Research center have detected a Denial of Service vulnerability in Siemens SIMATIC S7-1200 CPU PLC. An attacker could cause the device to go into defect mode if specially crafted PROFINET packets are sent to the device. A cold restart is required to recover the...