Lucene search
+L

985 matches found

Prion
Prion
•added 2014/03/11 1:01 p.m.•27 views

Code injection

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

6.1CVSS6.8AI score0.02406EPSS
SaveExploits2References7Affected Software3
Cvelist
Cvelist
•added 2014/03/11 1:00 a.m.•43 views

CVE-2014-2309

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

6AI score0.02406EPSS
SaveExploits2References7
CVE
CVE
•added 2014/03/11 1:00 a.m.•165 views

CVE-2014-2309

CVE-2014-2309 affects the Linux kernel (net/ipv6/route.c, function ip6_route_add) up to version 3.13.6. It causes memory exhaustion via a flood of ICMPv6 Router Advertisement packets, enabling a remote attacker to trigger DoS. The connected Nessus/OpenVAS advisories reference Unity Linux security...

6.1CVSS6AI score0.02406EPSS
SaveExploits2References7Affected Software1
Debian CVE
Debian CVE
•added 2014/03/11 1:00 a.m.•46 views

CVE-2014-2309

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

6.1CVSS5.8AI score0.02406EPSS
SaveExploits2
Mend
Mend
•added 2014/03/11 1:00 a.m.•4 views

CVE-2014-2309

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

7.1CVSS0.02406EPSS
SaveExploits2References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/11 12:00 a.m.•5 views

CVE-2014-2309: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

6.1CVSS5.8AI score0.02406EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2014/03/11 12:00 a.m.•68 views

Linux Kernel IPv6路由通告报文处理拒绝服务漏洞

CVE ID:CVE-2014-2309 Linux Kernel是一款开源的操作系统。 Linux Kernel在创建路由通告的路由时存在错误,允许攻击者利用漏洞提交恶意报文消耗大量内存资源,造成拒绝服务攻击。 要成功利用漏洞需要内核支持IPv6协议,并启用IPv6临时地址。 0 Linux Kernel 3.10.x Linux Kernel 3.12.x Linux Kernel 3.13.x 厂商补丁: Linux ----- 用户可参考厂商的GIT库以获得补丁修复此漏洞:...

6.1CVSS8.1AI score0.02406EPSS
SaveExploits2
OSV
OSV
•added 2014/02/17 4:55 p.m.•7 views

DEBIAN-CVE-2011-3605

The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...

5CVSS6AI score0.01595EPSS
SaveExploits0References1
NVD
NVD
•added 2014/02/17 4:55 p.m.•16 views

CVE-2011-3601

Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...

7.5CVSS7.8AI score0.03995EPSS
SaveExploits0References3
OSV
OSV
•added 2014/02/17 4:55 p.m.•13 views

CVE-2011-3601

Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...

7.8AI score
SaveExploits0References3
OSV
OSV
•added 2014/02/17 4:55 p.m.•10 views

DEBIAN-CVE-2011-3601

Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...

7.5CVSS7.7AI score0.03995EPSS
SaveExploits0References1
Prion
Prion
•added 2014/02/17 4:55 p.m.•15 views

Stack overflow

The processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to cause a denial of service stack-based buffer over-read and crash via unspecified vectors...

7.5CVSS7.1AI score0.01552EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2014/02/17 4:55 p.m.•19 views

Buffer overflow

Buffer overflow in the processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service crash via a negative value in a labellen value...

7.5CVSS8.4AI score0.03995EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/02/17 4:00 p.m.•52 views

CVE-2011-3604

The processra function in the router advertisement daemon radvd before 1.8.2 allows remote attackers to cause a denial of service stack-based buffer over-read and crash via unspecified vectors...

6.4AI score0.01552EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2014/02/17 4:00 p.m.•36 views

CVE-2011-3605

The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...

6.1AI score0.01595EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2014/02/17 4:00 p.m.•49 views

CVE-2011-3605

The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...

5CVSS6AI score0.01595EPSS
SaveExploits0
CVE
CVE
•added 2014/02/17 4:00 p.m.•90 views

CVE-2011-3605

CVE-2011-3605 affects radvd (router advertisement daemon). The issue occurs in process_rs when UnicastOnly is enabled, where an attacker can cause a denial-of-service (temporary service hang) by sending a flood of ND_ROUTER_SOLICIT requests. Affected software is radvd prior to version 1.8.2. The ...

5CVSS6AI score0.01595EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/12 12:00 a.m.•5 views

CVE-2014-0254: Improper Input Validation

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...

7.8CVSS5.7AI score0.32685EPSS
SaveExploits1References2
Symantec
Symantec
•added 2014/02/11 12:00 a.m.•23 views

Microsoft Windows TCP/IP IPv6 Router Advertisement Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP IPv6 protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition. Technologies Affected Microsoft Windows 8 for 32-bit...

0.3AI score
SaveExploits0Affected Software2
Positive Technologies
Positive Technologies
•added 2014/02/11 12:00 a.m.•2 views

PT-2014-1028

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server 2012 versions prior to the fixed version Windows RT versions prior to the fixed version Description The issue is related to the IPv6 implementation in Microsoft Windows, whic...

7.8CVSS0.32685EPSS
SaveExploits1References11
Rows per page
Query Builder