985 matches found
Code injection
The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...
CVE-2014-2309
The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...
CVE-2014-2309
CVE-2014-2309 affects the Linux kernel (net/ipv6/route.c, function ip6_route_add) up to version 3.13.6. It causes memory exhaustion via a flood of ICMPv6 Router Advertisement packets, enabling a remote attacker to trigger DoS. The connected Nessus/OpenVAS advisories reference Unity Linux security...
CVE-2014-2309
The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...
CVE-2014-2309
The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...
CVE-2014-2309: Improper Restriction of Operations within the Bounds of a Memory Buffer
The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...
Linux Kernel IPv6路由通告报文处理拒绝服务漏洞
CVE ID:CVE-2014-2309 Linux Kernel是一款开源的操作系统。 Linux Kernel在创建路由通告的路由时存在错误,允许攻击者利用漏洞提交恶意报文消耗大量内存资源,造成拒绝服务攻击。 要成功利用漏洞需要内核支持IPv6协议,并启用IPv6临时地址。 0 Linux Kernel 3.10.x Linux Kernel 3.12.x Linux Kernel 3.13.x 厂商补丁: Linux ----- 用户可参考厂商的GIT库以获得补丁修复此漏洞:...
DEBIAN-CVE-2011-3605
The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...
CVE-2011-3601
Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...
CVE-2011-3601
Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...
DEBIAN-CVE-2011-3601
Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...
Stack overflow
The processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to cause a denial of service stack-based buffer over-read and crash via unspecified vectors...
Buffer overflow
Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...
CVE-2011-3604
The processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to cause a denial of service stack-based buffer over-read and crash via unspecified vectors...
CVE-2011-3605
The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...
CVE-2011-3605
The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...
CVE-2011-3605
CVE-2011-3605 affects radvd (router advertisement daemon). The issue occurs in process_rs when UnicastOnly is enabled, where an attacker can cause a denial-of-service (temporary service hang) by sending a flood of ND_ROUTER_SOLICIT requests. Affected software is radvd prior to version 1.8.2. The ...
CVE-2014-0254: Improper Input Validation
The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...
Microsoft Windows TCP/IP IPv6 Router Advertisement Remote Denial of Service Vulnerability
Description Microsoft Windows TCP/IP IPv6 protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition. Technologies Affected Microsoft Windows 8 for 32-bit...
PT-2014-1028
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server 2012 versions prior to the fixed version Windows RT versions prior to the fixed version Description The issue is related to the IPv6 implementation in Microsoft Windows, whic...