artemis/hornetq: memory exhaustion via UDP and JGroups discovery

It was found that when Artemis and HornetQ are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service

snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

The vulnerability of the Simatic programmable logic controller’s software, related to resource exhaustion, allows a intruder to trigger a service failure.

The vulnerability of the Simatic programmable logic controller’s software is related to the exhaustion of resources. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted UDP packets...

The vulnerabilities of SIPROTEC relay protection devices stem from insufficient validation of input data, allowing attackers to trigger malfunctions in the service.

The vulnerability of SIPROTEC relay protection devices is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to trigger a service failure using specially created packets sent to port 50000/UDP...

Multiple Mitsubishi Electric Products Resource Management Error Vulnerability

The Misubishi Electric MELSEC iQ-R series is a programmable logic controller from Misubishi Electric. A resource management error vulnerability exists in several Mitsubishi Electric products. An attacker could cause a denial of service by sending a large amount of data to the MELSOFT transport po...

UBUNTU-CVE-2019-20797

An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by ISendPacket or ISendPacketTo in inetwork.c...

The vulnerability of the UDP protocol in the Siemens SIMATIC TDC CP51M1 communication module allows a intruder to cause a service failure.

The vulnerability of the UDP protocol in the Siemens SIMATIC TDC CP51M1 communication module is related to insufficient data validation during the processing of UDP traffic. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially created UDP packets...

jenkins: UDP multicast/broadcast service amplification reflection attack

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848...

jenkins: UDP multicast/broadcast service amplification reflection attack

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848...

The vulnerability of the Necko web library in the Firefox browser is related to a access failure to child elements during an incorrect flow during the UDP connection. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Necko web library in the Firefox browser is related to an access error for a child element during a wrong transmission process in a UDP connection. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerabilities of Siemens’ software and hardware infrastructure, related to errors in processing a large number of UDP packets, allow attackers to trigger service interruptions.

The vulnerability of Siemens’ software and hardware infrastructure is related to errors in processing a large number of UDP packets. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Beckhoff TwinCAT Denial of Service Vulnerability

Beckhoff TwinCAT is a software system from Beckhoff Germany consisting of a real-time environment and a real-time system for executing control programs in a development environment. The system is mainly used for PLC Programmable Logic Controller programming, diagnostics and system configuration. ...

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition...

PT-2019-3316 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG could allow an unauthenticated, remote attacker to cause a...

The vulnerability of the UDPmessageSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a attacker to cause service interruptions.

The vulnerability of the UDPmessageSetting component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file...

CVE-2019-10937

A vulnerability has been identified in SIMATIC TDC CP51M1 All versions V1.1.7. An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerabili...

Siemens SIMATIC TDC CP51M1 Input Validation Error Vulnerability

The Siemens SIMATIC TDC CP51M1 is an industrial Ethernet communication module for the SIMATIC TDC automation system from Siemens, Germany. An input validation error vulnerability exists in Siemens SIMATIC TDC CP51M1 versions prior to 1.1.7. An attacker could exploit this vulnerability by sending...

UBUNTU-CVE-2019-14199

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a netprocessreceivedpacket integer underflow during an udppackethandler call...

DEBIAN-CVE-2019-10638

In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols e.g., UDP and ICMP. When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions of indices to the counter...