EUVD-2014-6328

Malware in sbrugna...

Juniper Junos Fragmented TCP Packet Sequence Handling DoS (JSA10696)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper TCP packet reassembly. An unauthenticated, remote attacker can exploit this, via a specially crafted sequence of fragmented packets, to consume all...

CVE-2014-6449

CVE-2014-6449 affects Juniper Networks Junos OS (multiple branches/versions) where TCP packet reassembly is mishandled. A remote attacker can cause a denial of service by sending a crafted sequence of packets destined to the device, leading to buffer consumption. Concretely, the vulnerability tar...

PT-2015-3856

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X44-D50 Juniper Junos OS version 12.1X46 prior to 12.1X46-D35 Juniper Junos OS version 12.1X47 prior to 12.1X47-D25 Juniper Junos OS version 12.3 prior to 12.3R10 Juniper Junos OS version 12.3X48 prior to...

CVE-2014-6449: Undefined Security Weakness

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R5, and 14.2 before 14.2R1 do not properly handle TCP packet reassembly, which allows remote...

libnids buffer overflow

Buffer overflow in TCP packet reassembly...

Heap overflow in Snort "stream4" preprocessor

Overview The Snort "stream4" preprocessor module contains a vulnerability that allows remote attackers to execute arbitrary code with the privileges of the user running Snort, typically root. Description Researchers at CORE Security Technologies have discovered a remotely exploitable heap overflo...

Snort TCP Packet Reassembly Integer Overflow Vulnerability

Description A vulnerability has been discovered in Snort. The problem occurs during the reassembly of TCP packets by the stream4 preprocesser. By sending specially crafted fragmented packets across a network monitored by Snort, it may be possible to trigger an integer overflow. As a result, a...