Cisco IOS XE Software Resource Reservation Protocol Interface Queue Wedge Vulnerability (cisco-sa-20130925-rsvp)

A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS XE Software allows an unauthenticated, remote attacker to trigger an interface queue wedge on the affected device. The vulnerability is due to improper parsing of UDP RSVP packets. An attacker can exploit this...

CVE-2013-5503

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

Double free

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

CVE-2013-5503

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

CVE-2013-5503

CVE-2013-5503 concerns Cisco IOS XR 4.3.1 where the UDP processing path does not free packet memory after detecting full packet queues, enabling remote attackers to cause denial of service via UDP traffic to listening ports. The root cause is memory exhaustion on the device due to failure to rele...

CVE-2013-5478

Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service interface queue wedge via crafted UDP RSVP packets, aka Bug ID CSCuf17023...

Design/Logic Flaw

Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service interface queue wedge via crafted UDP RSVP packets, aka Bug ID CSCuf17023...

CVE-2013-5478

Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service interface queue wedge via crafted UDP RSVP packets, aka Bug ID CSCuf17023...

Cisco IOS Software Resource Reservation Protocol Interface Queue Wedge Vulnerability

A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger an interface queue wedge on the affected device. The vulnerability is due to improper parsing of UDP RSVP packets. An attack...

Juniper NetScreen VPN Client Multiple Buffer Overflow Vulnerabilities

The remote host is running a version of Juniper NetScreen VPN client that is affected by multiple buffer overflow vulnerabilities : - The IKE VPN service listening on UDP port 62514 is vulnerable to a stack overflow vulnerability that can be triggered by sending specially crafted packets...

Cisco Unified Communications Manager Multiple DoS Vulnerabilities (cisco-sa-20130227-cucm)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by one of the following denial of service vulnerabilities : - A flaw exists in the in the 8.6 branch due to improper processing of malformed packets to unused UDP ports. A remote,...

Cisco Unified Communications Manager UDP Memory Leak DoS (CSCub85597)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device insufficiently limits the rate of traffic on certain UDP ports, allowing a remote attacker to cause a denial of service condition by sending UDP packets at a high rate. %NASLMINLEVEL 70300 C Tenabl...

USN-1938-1: Linux kernel vulnerabilities

Vasily Kulikov discovered a flaw in the Linux Kernel's perf tool that allows specified to be run as root. A local could exploit this flaw to run commands as root when using the perf tool. user could exploit this CVE-2013-1060 A flaw was discovered in the Xen subsystem of the Linux kernel when it...

Amazon Linux AMI : kernel (ALAS-2011-26)

IPv6 fragment identification value generation could allow a remote attacker to disrupt a target system's networking, preventing legitimate users from accessing its services. CVE-2011-2699 , Important A signedness issue was found in the Linux kernel's CIFS Common Internet File System implementatio...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2011-10) (BEAST)

A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client could use this...

CVE-2013-3460

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

Memory corruption

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

Code injection

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

CVE-2013-3460

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...