The vulnerability of Cisco Nexus 1000V microprogramming software allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...

DEBIAN-CVE-2015-4651

The dissectwccp2r1addresstableinfo function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service applicatio...

wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service application crash via a crafted packet, related to the use of...

wireshark: NCP dissector crashes (wnpa-sec-2014-22)

The buildexpertdata function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

wireshark: TN5250 infinite loop (wnpa-sec-2014-23)

The dissectwritestructuredfield function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

FreeBSD -- Resource exhaustion due to sessions stuck in LAST_ACK state

Problem Description: TCP connections transitioning to the LASTACK state can become permanently stuck due to mishandling of protocol state in certain situations, which in turn can lead to accumulated consumption and eventual exhaustion of system resources, such as mbufs and sockets. Impact: An...

Microsoft Windows Arbitrary Code Execution Vulnerability

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An arbitrary code execution vulnerability exists in the RDP service of Microsoft Windows. A remote attacker is allowed to execute arbitrary code via a series of...

Cisco ASA OSPFv2 DoS Vulnerability (Cisco-SA-20150707-CVE-2015-4241)

Cisco ASA is prone to a OSPFv2 denial of service DoS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Juniper Networks Junos OS BFD Crash Vulnerability

Junos OS is prone to a vulnerability in BFD daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if descriptio...

The vulnerability of the Cisco IOS operating system allows a perpetrator to obtain information about the MAC addresses of devices and some details regarding the network configuration.

Vulnerability of the CMTS subsystem of the Cisco IOS operating system without protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain device MAC addresses and certain network configuration information using specially crafted IPDR packe...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to read arbitrary files.

Vulnerability of the Tivoli Storage Manager FastBack data management program due to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files by sending specially crafted TCP packets...

The vulnerability of Cisco ASA network gateways, which allows attackers to bypass authentication procedures

The vulnerability of the IKEv1 protocol implementation of the Cisco ASA network firewall is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by using specially crafted IKEv1 packets...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

The vulnerability of the microprogramming software of Cisco TelePresence TC devices allows a intruder to cause a service failure in the device.

The vulnerability of the microprogramming software used in Cisco TelePresence TC devices relates to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause the device to fail by sending specially crafted IP packets...

IBM Tivoli Storage Manager FastBack Arbitrary File Read Vulnerability (CNVD-2015-04164)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary file read vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

The vulnerability of Xen hypervisors allows a perpetrator to execute arbitrary code.

The vulnerability of the QEMU hypervisor component in Xen is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets containing fields such as TXSTATUSSTARTPACKET and TXSTATUSDEVIC...

Cisco IOS XR MPLS LDP Packet Processing Denial of Service Vulnerability

A vulnerability in the Multiprotocol Label Switching MPLS Label Distribution Protocol LDP packet processing feature of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the MPLS LDP process on the affected device. The vulnerability is due to improper processing of...

Cisco uBR10000 Series Universal Broadband Routers Information Disclosure Vulnerability

A vulnerability in the processing of IP Detail Record IPDR packets on Cisco uBR10000 devices could allow an unauthenticated, remote attacker to gather a limited amount of IPDR data from the affected device. The vulnerability is due to the inability of Cisco Cable Modem Termination Systems CMTS to...

DEBIAN-CVE-2015-3209

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUSSTARTPACKET set and then a crafted packet with TXSTATUSDEVICEOWNS set...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Telnet service in the Windows operating system is related to a buffer overflow exploit. Exploiting this vulnerability allows an attacker, working remotely, to execute arbitrary code by sending specially crafted network packets...