Code injection

Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service defect-mode transition via crafted 1 ISO-TSAP or 2 Profibus packets...

Cisco IOS Software Link Layer Discovery Protocol Processing Code Denial of Service Vulnerability (cisco-sa-20160616-ios1)

A vulnerability in the Link Layer Discovery Protocol LLDP packet processing code of Cisco IOS could allow an unauthenticated, adjacent attacker to cause the crash of an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

lib32-glibc: denial of service

clntudpcall allocates a buffer, using alloca, to store the payload of an incoming socket error. If a malicious server floods the client with crafted ICMP and UDP packets, this can cause the client to allocate sufficiently many such temporary buffers to cause a stack frame overflow denial of...

Siemens SIMATIC S7-300 CPU Denial of Service Vulnerability

The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller from Siemens for the manufacturing industry. A denial of service vulnerability exists in the Siemens SIMATIC S7-300 CPU family of devices. By exploiting the vulnerability, an attacker can launch a denial-of-service attack unde...

CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

CVE-2016-1370

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

ntp: out-of-bounds references on crafted packet

An out-of-bounds access flaw was found in the way ntpd processed certain packets. An authenticated attacker could use a crafted packet to create a peer association with hmode of 7 and larger, which could potentially although highly unlikely cause ntpd to crash...

CVE-2016-4576

Buffer overflow in the Application Specific Packet Filtering ASPF functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of servi...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

CVE-2016-1368

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

Code injection

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

CVE-2016-1368

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

CVE-2016-1368

CVE-2016-1368 affects Cisco FirePOWER System Software 5.3.x (up to 5.3.0.6) and 5.4.x (up to 5.4.0.3) on FirePOWER 7000/8000 appliances and the AMP for Networks component. The issue is caused by improper packet handling in the packet-processing subsystem when packets are passed through sensing in...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions by using specially created bit combinations in packets...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of the Junos operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using specially crafted TCP packets...

Wireshark SPICE Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A denial of service vulnerability exists in the epan/dissectors/packet-spice.c file in the SPICE parser of Wireshark versions 2.x prior to 2.0.2. A remote attacker can exploit this...