CVE-2019-6015

The CVE-2019-6015 entry concerns FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B routers with firmware up to version 1.1.7 that may act as open resolvers. This behavior can allow the device to be used in DNS amplification attacks against external targets. The linked documents provide...

FON routers may behave as an open resolver

Overview FON routers contain an issue where they may behave as open resolvers. A device that behaves as a DNS resolver for recursive DNS queries from anyone on the internet is called "Open Resolver". FON routers contain an issue where they may behave as open resolvers. Hideyoshi Okazaki of ARTERI...

Multiple FON Products Input Validation Error Vulnerability

The Fon Wireless FON2601E-SE, among others, is a wireless router from the Spanish company Fon Wireless. An input validation error vulnerability exists in multiple FON products, which can be exploited by attackers to conduct DNS amplification attacks against certain other entities via the FON...

Fedora 29 : nbdkit (2019-ee52ef0cdc)

New upstream version 1.12.7. Fixes Denial of Service / Amplication Attack: https://www.redhat.com/archives/libguestfs/2019-September/msg00084.htm l Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempte...

EulerOS 2.0 SP5 : avahi (EulerOS-SA-2019-1958)

According to the version of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows...

Fedora 30 : nbdkit (2019-867f0858e6)

New upstream version 1.12.7. Fixes Denial of Service / Amplication Attack: https://www.redhat.com/archives/libguestfs/2019-September/msg00084.htm l Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempte...

Massive Gaming DDoS Exploits Widespread Technology

UPDATE Akamai Wednesday revealed that it’s witnessed the fourth-largest DDoS attack the company has ever encountered, leveraging a widespread and highly exploitable UDP amplification technique known as WS-Discovery WSD. WSD—a consumer device network discovery and connectivity technology—was seen...

New DDoS Vector Observed in the Wild: WSD Attacks Hitting 35/Gbps

Additional research and support provided by Chad Seaman. Introduction Members of Akamai's Security Intelligence Response Team have been investigating a new DDoS vector that leverages a UDP Amplification technique known as WS-Discovery WSD. The situation surrounding WSD was recently made...

NewStart CGSL MAIN 4.05 : ntp Multiple Vulnerabilities (NS-SA-2019-0114)

The remote NewStart CGSL host, running version MAIN 4.05, has ntp packages installed that are affected by multiple vulnerabilities: - It was found that when ntp is configured with rate limiting for all associations the limits are also applied to responses received from its configured sources. A...

CVE-2018-10531

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

Code injection

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

CVE-2018-10531

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

CVE-2018-10531

The CVE-2018-10531 issue affects the America’s Army Proving Grounds platform (Unreal Engine). A false UDP packet prompts the application server to respond with extra bytes, enabling DoS amplification and potentially DDoS use, per Red Hat/NVD/NVD entries and related records. Documents validate the...

Denial Of Service (DoS)

NTP is vulnerable to denial of service attacks. A remote, unauthenticated attacker can send a specially crafted control mode packet to set and unset ntpd traps to obtain potentially sensitive information or conduct denial of service amplification attacks...

Updated: This DDoS Attack Unleashed the Most Packets Per Second Ever. Here’s Why That’s Important.

Updated April 30, 2019 with new data from an even larger attack. Skip directly to the bottom to learn more. DDoS attacks are usually measured by the amount of bandwidth involved, such as the 1.35 Terabits per second maximum attack directed at GitHub last year, the largest DDoS attack ever at the...

Preparing the Internet for the Next Mega DDoS Attack

When you think of a distributed denial-of-service DDoS attack at this point in the age of the internet, you might be thinking they’re old news. But when a multi-million-dollar business can be easily taken offline by an unskilled adversary and a $5 rent-a-DDoS service, I would argue that the issue...

OPENSUSE-SU-2019:0197-1 Security update for avahi

This update for avahi fixes the following issues: Security issue fixed: - CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses DOS bsc1120281 This update was imported from the SUSE:SLE-15:Update update project...

ThreatList: DDoS Attack Sizes Drop 85 Percent Post FBI Crackdown

The average size of distributed denial of service DDoS attacks decreased significantly, dropping by 85 percent in the fourth quarter of 2018. Researchers with NexusGuard said in a Tuesday report shared with Threatpost, that the number of DDoS attacks also dipped significantly, sinking by almost 1...

CVE-2019-9750

In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01...

Design/Logic Flaw

In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01...