The vulnerability of Cisco IOS and Cisco IOS XE operating systems that use TACACS+ client authentication allows attackers to induce a service failure.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems that use TACACS+ client authentication is related to errors in processing TACACS+ response packets. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure...

Design/Logic Flaw

A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...

CVE-2018-0484 Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability

A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...

CVE-2018-0484

CISCO IOS and IOS XE Software Secure Shell (SSH) has an access-control logic vulnerability that allows a VRF-sourced connection to reach the SSH service without the vrf-also keyword in the access-class, due to a missing check in the SSH server. An attacker could open an SSH session to an affected...

CVE-2018-0484 Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability

A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...

Design/Logic Flaw

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

CVE-2018-0282

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

CVE-2018-0282

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

CVE-2018-0282 Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

CVE-2018-0484: Improper Access Control

A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...

CVE-2018-0282

CVE-2018-0282 : Cisco IOS and IOS XE Software have a vulnerability in the TCP socket code that can allow an unauthenticated, remote attacker to cause an affected device to reload (DoS). The issue stems from a state mismatch between the socket and the TCP control block, with the only observed affe...

CVE-2018-0282: Undefined Security Weakness

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

CVE-2018-0282 Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability

A vulnerability in the access control logic of the Secure Shell SSH server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding VRF instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a...

PT-2019-1174

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is related to errors in managing the state of TCP sockets in Cisco IOS and Cisco IOS XE Software. This could allow a remote attacker to cause the device ...

PT-2019-1282

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A vulnerability in the access control logic of the Secure Shell SSH server may allow connections sourced from a virtual routing and forwarding VRF instance despite the...

Intel® Parallel Studio XE for Windows* Vulnerability Advisory

Summary: A potential security vulnerability in Intel® Parallel Studio XE for Windows may allow for an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3704 Description: Improper directory permissions in t...

Heap overflow

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...

CVE-2018-12174

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...

CVE-2018-12174

Intel Advisory INTEL-SA-00180 confirms CVE-2018-12174 as a heap overflow in Intel® Trace Analyzer 2018 within Intel® Parallel Studio XE 2018 Update 3, potentially enabling an authenticated user to escalate privileges via local access. Affected product line is Intel® Parallel Studio XE 2018 Update...