CVE-2017-2348

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...

CVE-2017-2348 Junos OS: jdhcpd daemon crash due to invalid IPv6 UDP packets

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...

CVE-2017-2348

The CVE-2017-2348 issue affects Juniper Networks Junos OS where the jdhcpd daemon may experience high CPU utilization or crash when handling invalid IPv6 UDP packets, leading to a denial of service by interrupting DHCP service. Affected releases include Junos OS 14.1X53 before certain D-branch fi...

DNSSEC RR Stub Resolver Denial Of Service Exploit

Exploit for linux platform in category dos / poc !/usr/bin/perl DNS/DNSSEC RR stub resolvers amplification ddos Copyright 2017 c Todor Donev email protected https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous program is for Educational purpose...

IoT mDNS/DNS-SD QM Amplification Distributed Denial Of Service

!/usr/bin/perl IoT mDNS/DNS-SD 'QM' amplification ddos Copyright 2017 c Todor Donev [email protected] https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous program is for Educational purpose ONLY. Do not use it without permission. The usual...

rpcinfo Portmap DUMP Call Amplification Distributed Denial Of Service

!/usr/bin/perl rpcinfo Portmap 'DUMP' call amplification ddos Copyright 2017 c Todor Donev [email protected] https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous program is for Educational purpose ONLY. Do not use it without permission. The...

rpcinfo Portmap DUMP Call Amplification Distributed Denial Of Service Exploit

Exploit for linux platform in category dos / poc !/usr/bin/perl rpcinfo Portmap 'DUMP' call amplification ddos Copyright 2017 c Todor Donev email protected https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous program is for Educational purpose ONL...

Input validation

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

Metasploit Wrapup

Metasploit Hackathon We were happy to host the very first Metasploit framework open source hackathon this past week in the Rapid7 Austin. Eight Metasploit hackers from outside of Rapid7 joined forces with the in-house team and worked on a lot of great projects, small and large. @bcook started the...

Race condition

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

CVE-2017-6678

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

CVE-2017-6678

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

CVE-2017-6678

The CVE-2017-6678 issue affects Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) software 19.2–21.0. It exploits the ingress UDP packet processing function, where insufficient handling of user-supplied data can allow an unauthenticated remote attacker to trigger a reload of both CF (co...

CVE-2017-6678

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

[SECURITY] Fedora 26 Update: openvpn-2.4.3-1.fc26

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

[SECURITY] Fedora 25 Update: openvpn-2.4.3-1.fc25

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

Cisco Virtualized Packet Core-Distributed Instance Denial of Service Vulnerability

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a denial of service Do...