CVE-2015-8724

CVE-2015-8724 affects Wireshark’s 802.11 dissector: the AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c does not verify the WPA broadcast key length. This can be exploited by a crafted packet to cause an out-of-bounds read and application crash (DoS). Affected releases include Wi...

PT-2015-7691

Name of the Vulnerable Software and Affected Versions NTP versions 4.2.8p5 and earlier NTP versions 4.3.x before 4.3.90 Description The issue allows remote attackers to cause a denial of service by sending broadcast packets with invalid authentication to a broadcast client, resulting in a...

CVE-2015-7979

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service client-server association tear down by sending broadcast packets with invalid authentication to a broadcast client...

CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...

PT-2015-7686

Name of the Vulnerable Software and Affected Versions NTP versions 4.2.8p5 and earlier NTP versions 4.3.x before 4.3.90 Description The issue allows man-in-the-middle attackers to conduct replay attacks by sniffing the network when NTP is configured in broadcast mode. Recommendations For NTP...

UBUNTU-CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...

UBUNTU-CVE-2015-7979

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service client-server association tear down by sending broadcast packets with invalid authentication to a broadcast client...

Ubuntu 14.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-2808-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2808-1 advisory. It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform...

USN-2808-1: wpa_supplicant and hostapd vulnerabilities

It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform broadcast/multicast packet injections, or cause a denial of service. CVE-2015-5310 It was discovered that wpasupplicant and hostapd incorrectly...

PT-2015-2966

Name of the Vulnerable Software and Affected Versions wpa supplicant versions 2.x before 2.6 Description The issue is related to the WNM Sleep Mode code in wpa supplicant, which does not properly ignore key data in response frames when management frame protection MFP was not negotiated. This allo...

GLSA-201509-05 : NetworkManager: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201509-05 NetworkManager: Denial of Service IPv6 Neighbour Discovery ICMP broadcast containing a non-route with a low hop limit causes a Denial of Service by lowering the hop limit on existing IPv6 routes in NetworkManager. Impact...

The vulnerability of iOS and Mac OS X operating systems allows attackers to gain access to the MAC addresses of devices, which are obtained during previous Wi-Fi sessions.

The vulnerability of the bootp component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to access the protected information about the MAC addresses of devices, obtained during previous WiFi sessions,...

Design/Logic Flaw

bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic...

CVE-2015-3778: Exposure of Sensitive Information to an Unauthorized Actor

bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic...

The vulnerability of Cisco ASA network gateways, which allows attackers to trigger a service failure

The vulnerability of the PIM network interface card in Cisco ASA applications is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by generating specific broadcast requests...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

Cisco Wireless LAN Controller IPv6 Packet Handling Denial of Service Vulnerability

A vulnerability in Cisco Wireless LAN Controller WLC devices could allow an unauthenticated, adjacent attacker could to cause a crash of an affected device. The vulnerability exists due to an unhandled exception that may occur when IPv6 traffic is forwarded to a device that is not configured for...

Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Denial of Service Vulnerability

A vulnerability in flow control processing of Cisco IOS XR Software for Cisco ASR 9000 Series Routers could allow an unauthenticated, adjacent attacker to cause a Network Processing Unit NPU chip reset and potentially a reload of the affected line card. The vulnerability is due to improper...

Valve Steam Denial of Service Vulnerability

Valve Steam is Valve's game integration platform, initially used as an immediate update for CS, HL2 and other Valve games, but has now evolved into a convenient and fast comprehensive download platform. A denial of service vulnerability exists in Valve Steam, which allows remote attackers to caus...