329 matches found
kernel: ICMP rate limiting can be used for DNS poisoning attack
A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentialit...
The vulnerability of the ICMP packet processing service in the NX-OS operating system allows a hacker to induce a service failure.
The vulnerability of the ICMP packet processing service in the NX-OS operating system is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...
The vulnerability of the microprogramming software of Cisco IOS XE routing devices in the Cisco Catalyst 9800 Series is related to access control errors. This vulnerability allows a attacker to send ICMPv6 traffic until the client enters a RUN state.
The vulnerability of the microprogramming software in Cisco IOS XE wireless communication controller and Cisco Catalyst 9800 Series routers is related to access control errors. Exploiting this vulnerability allows a malicious actor to send ICMPv6 traffic until the client enters a RUN state...
picoTCP-NG and picoTCP Input Validation Error Vulnerabilities
Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. An input validation error vulnerability exists in picoTCP-NG and picoTCP that stems from no...
CVE-2020-7460
In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, the sendmsg system call in the compat32 subsystem on 64-bit platforms has a time-of-check to time-of-use vulnerability allowing a mailcious userspace...
DEBIAN-CVE-2020-10756
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...
Tracert command doesn't receive responses when you trace resources on Internet through Windows Server 2012 R2 HNV GW
Tracert command doesn't receive responses when you trace resources on Internet through Windows Server 2012 R2 HNV GW This article describes an issue in which the tracert command doesn't receive responses when you trace resources on Internet through Windows Server 2012 R2 Hyper-V Network...
CVE-2015-5745
Buffer overflow in the sendcontrolmsg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service QEMU process crash via a crafted virtio control message...
DEBIAN-CVE-2015-5745
Buffer overflow in the sendcontrolmsg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service QEMU process crash via a crafted virtio control message...
Buffer overflow
Buffer overflow in the sendcontrolmsg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service QEMU process crash via a crafted virtio control message...
CVE-2015-5745
Buffer overflow in the sendcontrolmsg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service QEMU process crash via a crafted virtio control message...
CVE-2015-5745
Buffer overflow in the sendcontrolmsg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service QEMU process crash via a crafted virtio control message...
CVE-2014-5209
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private mode 6/7 messages via a GETRESTRICT control message, which could let a malicious user obtain sensitive information...
CVE-2014-5209
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private mode 6/7 messages via a GETRESTRICT control message, which could let a malicious user obtain sensitive information...
CVE-2014-5209
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private mode 6/7 messages via a GETRESTRICT control message, which could let a malicious user obtain sensitive information...
UBUNTU-CVE-2018-14882
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c...
FreeBSD -- File description reference count leak
Problem Description: FreeBSD 12.0 attempts to handle the case where the receiving process does not provide a sufficiently large buffer for an incoming control message containing rights. In particular, to avoid leaking the corresponding descriptors into the receiving process' descriptor table, the...
CVE-2018-4407
creationtimestamp| type| source ---|---|--- 2018-11-01 16:55:05+00:00| published-proof-of-concept| https://t.me/alexmakus/2490 2018-11-01 21:54:24+00:00| seen| https://t.me/zhovnerhub/181 2018-11-01 21:59:59+00:00| published-proof-of-concept| https://t.me/antichat/2495 2018-11-02 02:17:41+00:00|...
PT-2018-4260
Name of the Vulnerable Software and Affected Versions NTP version 4.2.7p25 Description The issue allows a malicious user to obtain sensitive information through private mode 6/7 messages via a GET RESTRICT control message. Additionally, a remote authenticated attacker could bypass security...