DNSmasq Denial of Service Vulnerability (CNVD-2017-29274)

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. A denial of service vulnerability in DNSmasq 2.77 and prior versions allows remote attackers to consume excessive memory on the target system by sendi...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

CVE-2017-12233

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

CVE-2017-12234

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

CVE-2017-12233

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

Cisco IOS Software Common Industrial Protocol Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS, which arises from the program's failure to properly parse specially crafted CIP packets. A remote...

Security Advisory - Several Vulnerabilities in H323 protocol of Huawei Products

There are two out-of-bounds read vulnerabilities in H323 protocol of Huawei products. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot. Vulnerability ID:...

PT-2017-2992 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.4 through 15.6 Description: The issue is due to insufficient input validation when handling CIP packets, allowing a remote attacker to cause a device reload and denial of service DoS using a specially crafted CIP packet...

Linux Kernel NFSv4 nfsd PNFS denial of Service (CVE-2017-8797)

A denial of service vulnerability exists in the NFSv4 component of the Linux Kernel. The vulnerability is due to improper handling of the pNFS LAYOUTGET and GETDEVICEINFO commands. A remote attacker can exploit this vulnerability by sending maliciously crafted packets to a vulnerable system...

[ASA-201709-5] tcpdump: multiple issues

Arch Linux Security Advisory ASA-201709-5 ========================================= Severity: Critical Date : 2017-09-13 CVE-ID : CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900...

Denial of Service Vulnerability in Multiple Internet Initiative Japan SEIL Series Routers

Internet Initiative Japan SEIL/X, etc. are router products of Internet Initiative Japan. A security vulnerability exists in several Internet Initiative Japan SEIL series routers. The vulnerability can be exploited by a remote attacker with specially crafted packets to briefly prevent encrypted...

Microsoft Windows NetBT Session Services Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.NetBT Session Services is one of the session service components. A remote code execution vulnerability exists in NetBT Session Services in Microsoft Windows. A remote attacker can exploit this vulnerability by sending...

The vulnerability of the ACL component of the NoviWare operating system allows a attacker to gain access to the network interface of the novi_process_manager_daemon service and execute arbitrary code in privileged mode on the switch.

The vulnerability of NoviWare’s operating system component stems from the improper handling of unserialized network packets, which leads to buffer overflows on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the application of ACL modifications,...

EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1179)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...

EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1180)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...