Lucene search
+L

51 matches found

Mend
Mend
•added 2017/07/06 1:00 a.m.•4 views

CVE-2016-10396

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in...

8.7CVSS0.02928EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2017/07/06 1:00 a.m.•44 views

CVE-2016-10396

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in...

7.4AI score0.02928EPSS
SaveExploits0References3
CVE
CVE
•added 2017/07/06 1:00 a.m.•93 views

CVE-2016-10396

CVE-2016-10396 affects IPsec-Tools 0.8.2’s racoon daemon. A remote attacker can exhaust the remote endpoint’s resources by repeatedly sending ISAKMP fragment packets in a specific order, triggering a worst-case computational complexity in fragment reassembly (DoS). The NVD CVSSv3 base score is 7....

7.8CVSS7.3AI score0.02928EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2017/07/06 1:00 a.m.•78 views

CVE-2016-10396

Removed by vendor...

7.8CVSS7.7AI score0.02928EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/06 12:00 a.m.•10 views

CVE-2016-10396: Inefficient Algorithmic Complexity

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in...

7.8CVSS5.9AI score0.02928EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/07/05 12:00 a.m.•1 views

PT-2017-7894

Name of the Vulnerable Software and Affected Versions IPsec-Tools version 0.8.2 Description The issue concerns a computational-complexity attack that can be remotely exploited when parsing and storing ISAKMP fragments. This occurs because the implementation allows a remote attacker to exhaust...

7.8CVSS0.02928EPSS
SaveExploits0References15
osv_ubuntu
osv_ubuntu
•added 2017/07/05 12:00 a.m.•18 views

UBUNTU-CVE-2016-10396

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in...

7.5CVSS7.1AI score0.02928EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2017/07/05 12:00 a.m.•27 views

CVE-2016-10396

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in...

7.8CVSS6.9AI score0.02928EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2016/12/02 12:00 a.m.•32 views

ipsec-tools -- remotely exploitable computational-complexity attack

Robert Foggia via NetBSD GNATS reports: The ipsec-tools racoon daemon contains a remotely exploitable computational complexity attack when parsing and storing isakmp fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly...

7.8CVSS3.1AI score0.02928EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2006/02/18 9:00 p.m.•74 views

CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

5CVSS6.1AI score0.06228EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/18 12:00 a.m.•6 views

CVE-2006-0042: Undefined Security Weakness

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

5CVSS5.8AI score0.06228EPSS
SaveExploits0References1
Rows per page
Query Builder