CVE-2019-0785

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'...

Cisco TelePresence Endpoint Command Shell Injection Vulnerability

According to its self-reported version, the Cisco TelePresence Codec TC and Collaboration Endpoint CE Cisco TelePresence Software is affected by a vulnerability in the Cisco Discovery Protocol CDP implementation which could allow an unauthenticated, adjacent attacker to inject arbitrary shell...

CVE-2019-10931

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...

CVE-2019-10930

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...

The vulnerability of Huawei’s S-series router microprogramming software, which stems from insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of Huawei’s S-series router microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to trigger a reboot and service failure on a vulnerable device by sending specially crafted packets...

Siemens SIPROTEC 5 and Siemens DIGISI 5 Denial of Service Vulnerabilities

Siemens SIPROTEC 5 and Siemens DIGISI 5 are both products of Siemens, Germany.Siemens SIPROTEC 5 is a multifunction relay.Siemens DIGISI 5 is a set of user interfaces for Siemens SIPROTEC devices. A denial of service vulnerability exists in Siemens SIPROTEC 5 and Siemens DIGISI 5. An attacker can...

Denial of Service Vulnerability in KUNBUS-GW Ethernet/IP

The KUNBUS-GW Ethernet/IP is a programmable logic controller PLC that provides an integrated ControlNet communication port and offers two integrated Ethernet interfaces. A denial of service vulnerability exists in KUNBUS-GW Ethernet/IP. An attacker could exploit this vulnerability by sending...

The vulnerability of the Cisco StarOS operating system’s packet handler, which allows a hacker to trigger a service failure

The vulnerability of the Cisco StarOS operating system’s packet processor is related to a logical error in packet processing. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service attack by sending a specially crafted sequence of packets...

Huawei Data Communication: DoS Vulnerability in Huawei S Series Switch Products (huawei-sa-20190522-01-switch)

Some Huawei S series switches have a DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:huawei:s"; if...

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system arises due to a segmentation error in the retransmission queue. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted sequence of SACK packets...

The vulnerability of the Linux operating system’s kernel, caused by errors in processing minimum-sized segments, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel arises from errors in processing segments of minimal size. Exploiting this vulnerability allows a remote attacker to cause a service failure by sending a specially crafted sequence of TCP packets...

The vulnerability of the RACK module in the FreeBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the RACK module in the FreeBSD operating system arises due to errors in processing segments of minimal size. Exploiting this vulnerability allows a remote attacker to cause a service failure by sending a specially crafted sequence of SACK packets...

Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XR Software. This could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service...

CVE-2019-1869 Cisco StarOS Denial of Service Vulnerability

A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerabili...

CVE-2019-1869 Cisco StarOS Denial of Service Vulnerability

A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerabili...

Cisco StarOS Denial of Service Vulnerability

A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerabili...

CVE-2018-18878

In firmware version MS2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable...

CVE-2018-18878

In firmware version MS2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable...

Check Point Response to CVE-2019-11477, CVE-2019-11478, CVE-2019-11479 - TCP SACK PANIC Linux Kernel vulnerabilities

Cause CVE-2019-11477: The Linux kernel is vulnerable to an integer overflow in the 16-bit width of TCPSKBCBskb- tcpgsosegs. A remote attacker could exploit this to crash the system and create a Denial Of Service. CVE-2019-11478: The Linux kernel is vulnerable to a flaw that allows attackers to se...

Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service

An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment SACK segments. While processing SACK segments, the Linux kernel's socket buffer SKB data structure becomes fragmented. Each fragment is about TCP maximum segment size MSS...