The vulnerability of the Windows operating system’s DHCP client allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s DHCP client is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially crafted packets that simulate DHCP server responses...

CVE-2019-1206

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the vulnerability, an...

CVE-2019-1206

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the vulnerability, an...

PT-2019-3162 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows Server DHCP service affected versions not specified Description: A memory corruption issue exists in the Windows Server DHCP service, allowing an attacker to run arbitrary code on the DHCP server by sending specially crafted packets...

PT-2019-4736 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9.4 through vx7 Description: The issue is related to a TCP protocol vulnerability in Wind River VxWorks real-time operating systems, specifically concerning errors in the TCP Urgent Pointer state when a shared...

kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP

A flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capparseconfrsp and l2capparseconfreq functions. An attacker with physical access within the range of standard Bluetooth transmission can create a...

kernel: Heap address information leak while using L2CAP_GET_CONF_OPT

A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol L2CAP, part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packe...

The vulnerability of the Precision Time Protocol (PTP) implementation in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the Precision Time Protocol PTP implementation in the Cisco IOS operating system is related to errors in processing PTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted PTP packets...

The vulnerability of the DHCP server service in Windows Server operating systems allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the DHCP server service for Windows Server lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code by sending a specially crafted packet to...

DEBIAN-CVE-2019-1010279

Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c...

UBUNTU-CVE-2019-1010251

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c an...

The vulnerability of the microprogrammed software of SIEMENS LOGO!8 programmable logic controllers, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of SIEMENS LOGO!8 programmable logic controllers is related to improper access control. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending specially crafted packets to port 10005/TCP...

CVE-2019-0785

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'...

Cisco TelePresence Endpoint Command Shell Injection Vulnerability

According to its self-reported version, the Cisco TelePresence Codec TC and Collaboration Endpoint CE Cisco TelePresence Software is affected by a vulnerability in the Cisco Discovery Protocol CDP implementation which could allow an unauthenticated, adjacent attacker to inject arbitrary shell...

CVE-2019-10931

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...

CVE-2019-10930

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...

The vulnerability of Huawei’s S-series router microprogramming software, which stems from insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of Huawei’s S-series router microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to trigger a reboot and service failure on a vulnerable device by sending specially crafted packets...

Siemens SIPROTEC 5 and Siemens DIGISI 5 Denial of Service Vulnerabilities

Siemens SIPROTEC 5 and Siemens DIGISI 5 are both products of Siemens, Germany.Siemens SIPROTEC 5 is a multifunction relay.Siemens DIGISI 5 is a set of user interfaces for Siemens SIPROTEC devices. A denial of service vulnerability exists in Siemens SIPROTEC 5 and Siemens DIGISI 5. An attacker can...

Denial of Service Vulnerability in KUNBUS-GW Ethernet/IP

The KUNBUS-GW Ethernet/IP is a programmable logic controller PLC that provides an integrated ControlNet communication port and offers two integrated Ethernet interfaces. A denial of service vulnerability exists in KUNBUS-GW Ethernet/IP. An attacker could exploit this vulnerability by sending...

The vulnerability of the Cisco StarOS operating system’s packet handler, which allows a hacker to trigger a service failure

The vulnerability of the Cisco StarOS operating system’s packet processor is related to a logical error in packet processing. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service attack by sending a specially crafted sequence of packets...