Virus.Win32.Ipamor.c Unauthenticated Remote System Reboot

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/bbf032a3aa288f02403295f0472d1f05.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Ipamor.c Vulnerability: Unauthenticated Remote System Reboot Description: The malware...

PT-2021-29523

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue is related to a race condition between close and udp abort in the UDP protocol. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.12.13. The actual...

PT-2021-29444

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue is related to a race condition between the close function and the udp abort function in the UDP protocol implementation. This race condition was introduced in version v4.9 and is...

PT-2021-29382

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue is related to a race condition between the close function and the udp abort function in the UDP protocol implementation. This race condition may potentially lead to security...

PT-2021-25450

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue is related to a race between close and udp abort in the UDP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-25529

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue is related to a race between close and udp abort in the UDP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-25388

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: The issue is related to a race between close and udp abort in the UDP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in proto_item_append_text

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6507061633482752 Project: wireshark Fuzzing Engine: honggfuzz Fuzz Target: fuzzsharkipproto-udp Job Type: honggfuzzasanwireshark Platform Id: linux...

What is Ping of Death Assault?

Ping of death is a strategy for DoS Denial of Service assault. It’s an attack-type that objectifies the ICMP Internet Control Message Protocol and the TCP Transmission Control Protocol, and is quite possibly the most undermining of all ICMP attacks. The ping of death attack is otherwise called a...

“Huge upsurge” in DDoS attacks during pandemic

Researchers at Netscout have released a report analyzing the malicious internet traffic of 2020 and comparing it to the years before. Some of the results were as expected: Brute-forcing credentials and more targeting towards internet-connected devices were foreseeable and have been discussed at...

Backdoor.Win32.Mnets Remote Stack Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1e42493dcef54a62bc28e0a1338c1142.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Mnets Vulnerability: Remote Stack Buffer Overflow - UDP Datagram Proto Description: T...

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_idn

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6331066742865920 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

Fedora: Security Advisory for coturn (FEDORA-2020-f3fcb1608a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for memcached (EulerOS-SA-2019-2631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : memcached (EulerOS-SA-2019-2213)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...

On-Board 'Mystery Boxes' Threaten Global Shipping Vessels

Commercial shipping environments are rife with vulnerabilities, according to researchers – up to and including unpatched “mystery boxes” that no one knows anything about. “In every single nautical pen test to date we have unearthed a system or device, that of the few crew that were aware, no one...

CVE-2017-8416

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and listens for broadcast packets sent on 255.255.255.255. This daemon handles custom D-Link UDP based protocol that allows D-Link mobile applications and...

Buffer overflow

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and listens for broadcast packets sent on 255.255.255.255. This daemon handles custom D-Link UDP based protocol that allows D-Link mobile applications and...

Race condition

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service DoS condition. The vulnerability is due to improper resource management for UDP ingress...