380 matches found
CVE-2015-2721
Mozilla Network Security Services NSS before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle...
Design/Logic Flaw
Mozilla Network Security Services NSS before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle...
CVE-2015-2721: Undefined Security Weakness
Mozilla Network Security Services NSS before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle...
UBUNTU-CVE-2015-2721
Mozilla Network Security Services NSS before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle...
CVE-2015-2721
Mozilla Network Security Services NSS before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle...
SMB send off unrelated memory contents
libcurl can get tricked by a malicious SMB server to send off data it did not intend to. In libcurl's state machine function handling the SMB protocol smbrequeststate, two length and offset values are extracted from data that has arrived over the network, and those values are subsequently used to...
DEBIAN-CVE-2014-3619
The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...
UBUNTU-CVE-2014-3619
The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...
CVE-2014-3619
The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...
PT-2015-3728 · Red Hat +1 · Glusterfs +1
Name of the Vulnerable Software and Affected Versions: GlusterFS version 3.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This is achieved by sending a specific fragment header, "00000000", to the socket proto state machine function...
CVE-2015-0636: Improper Input Validation
The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service disrupted domain access via spoofed AN messages that reset a finite state machine,...
glusterfs: fragment header infinite loop DoS
A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...
glusterfs: fragment header infinite loop DoS
A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...
Debian DSA-2903-1 : strongswan - security update
An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...
DSA-2903-1 strongswan - security update
Bulletin has no description...
Debian Security Advisory DSA 2903-1 (strongswan - security update)
An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...
Nginx 0.6.38 - Heap Corruption
Nginx 0.6.38 - Heap Corruption !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: offset At that point, merely dump the r; capture the value for the data pointer it'll be the one wit...
security flaw
Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service server crash via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module...
[Full-disclosure] Cisco PIX embryonic state machine 1b data DoS
Arhont Ltd - Information Security Arhont Advisory by: Konstantin V. Gavrilenko http://www.arhont.com http://www.hackingciscoexposed.com Arhont ref: arh200601-1 Advisory: Cisco PIX embryonic state machine 1b data DoS Class: design bug? Version: Tested on PIX535, PIX OS ver 6.34 Tested on PIX515E,...