PT-2016-2272

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.21T1.11 through 15.22TST Description The issue is caused by improper handling of crafted LLDP packets, which can lead to a denial of service condition. An unauthenticated, adjacent attacker could exploit this by sending a...

Cisco NX-OS Malformed ARP Header Denial of Service Vulnerability

A vulnerability in Address Resolution Protocol ARP feature of the Cisco Nexus Operating System NX-OS could allow an unauthenticated, adjacent attacker to cause a partial denial of service DoS condition because the ARP process unexpectedly restarts. Copyright C 2016 Greenbone Networks GmbH Some te...

Cisco IOS XE Cisco Discovery Protocol Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco Catalyst 4500 Series Switches running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of valid crafted Cisco Discovery Protocol packet...

Cisco IOS XE Software Packet Processing Denial of Service Vulnerability

Cisco IOS XE Software Release 16.1.1 contains a vulnerability that could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect processing of packets that have a source MAC address of 0000:0000:0000. An attacker could exploit this...

PT-2015-7251

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1.1 Description The issue is caused by incorrect processing of packets with a source MAC address of 0000:0000:0000, allowing an unauthenticated, adjacent attacker to cause the device to reload by sending a frame with a...

F5 BIG-IP - vCMP DoS vulnerability CVE-2015-6546

The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

PT-2015-7174

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices with software 7.0240.0, 7.3101.0, and 7.41.19 Description The issue is a denial of service vulnerability that could allow an unauthenticated, adjacent attacker to cause a device outage by sending...

PT-2015-7147

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 1000V devices version 5.21SV31.4 Cisco NX-OS on Nexus 3000 devices version 7.30ZD0.47 Cisco NX-OS on Nexus 4000 devices version 4.12E1 Cisco NX-OS on Nexus 9000 devices version 7.30ZD0.61 Cisco NX-OS on MDS 9000 devices...

Cisco NX-OS Internet Group Management Protocol Denial of Service Vulnerability

A vulnerability in the Internet Group Management Protocol version 3 IGMPv3 input packet processing of Cisco NX-OS could allow an unauthenticated, adjacent attacker to cause the IGMP process to restart due to a malformed IGMP packet, which could cause a denial of service DoS condition on the devic...

Cisco Nexus Operating System Address Resolution Protocol Denial of Service Vulnerability

A vulnerability in the Address Resolution Protocol ARP input packet processing of the Cisco Nexus Operating System NX-OS devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of the ARP packet and the...

PT-2015-2243

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.12E11b through 7.30ZN0.9 Cisco Nexus 1000V devices for VMware vSphere version 7.30ZN0.9 Cisco Nexus 3000 devices versions 6.02U51.41 through 7.30ZN0.83 Cisco Nexus 4000 devices version 4.12E11b Cisco Nexus 7000 devices...

PT-2015-3188

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.5102.0 through 7.61.62 Description The issue is related to errors in resource management, allowing remote attackers to cause a denial of service by triggering an exception during attempted forwarding of...

Cisco IOS XE Software Overlay Transport Virtualization (OTV) DoS

The remote Cisco device is affected by a denial of service vulnerability due to improper processing of oversized Overlay Transport Virtualization OTV frames. An unauthenticated, adjacent attacker can exploit this, by sending a large number of oversized OTV frames requiring fragmentation and...

Cisco IOS XE DHCPv6 Server DoS

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCPv6 server implementation due to improper handling of DHCPv6 packets for SOLICIT messages for Identity Association for Non-Temporary Addresses...

PT-2015-4846

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.3S Description The issue is related to the improper processing of malformed ISDN Q931 SETUP messages in the ISDN implementation, which can cause a denial of service device reload. An unauthenticated, adjacent attacker can...

PT-2015-4838

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.5.x through 7.6.119 Description A denial of service issue exists due to improper input sanitization of a certain value supplied by a user prior to authentication. An attacker could exploit this by...

qemu, xen and VirtualBox OSE -- possible VM escape and code execution ("VENOM")

Jason Geffner, CrowdStrike Senior Security Researcher reports: VENOM, CVE-2015-3456, is a security vulnerability in the virtual floppy drive code used by many computer virtualization platforms. This vulnerability may allow an attacker to escape from the confines of an affected virtual machine VM...

Fixed in Apache Tomcat JK Connector 1.2.41

Important: Information disclosure CVE-2014-8111 Multiple adjacent slashes in a request URI were not collapsed to a single slash before comparing the request URI to the configured mount and unmount patterns. It is therefore possible for an attacker to use a request URI containing multiple adjacent...

PT-2015-4802

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.3103.8 through 7.4110.0 Description The web-authentication functionality on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device reload via a malform...

xorg-server -- Information leak in the XkbSetGeometry request of X servers.

Peter Hutterer reports: Olivier Fourdan from Red Hat has discovered a protocol handling issue in the way the X server code base handles the XkbSetGeometry request. The issue stems from the server trusting the client to send valid string lengths in the request data. A malicious client with string...