DEBIAN-CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...

Shadowsocks-libev Information Disclosure Vulnerability

Shadowsocks-libev is a lightweight secure SOCKS5 agent for embedded devices. An information disclosure vulnerability exists in the network packet handling feature in Shadowsocks-libev version 3.3.2, which can be exploited by an attacker to disclose information with the help of specially crafted...

CVE-2019-5268

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories...

Cisco NX-OS Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to...

Cisco IOS Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Internet Key Exchange Version 2 IKEv2 module due to incorrect processing of certain IKEv2 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IKEv2 packets t...

Cisco Adaptive Security Appliance Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF...

Cisco IOS OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco IOS is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to cause the...

Cisco IOS Software Internet Key Exchange Version 1 DoS (cisco-sa-20180328-ike-dos)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in its Internet Key Exchange Version 1 IKEv1 functionality due to improper validation of specific IKEv1 packets. An unauthenticated, remote attacker can exploit this by sending crafted IKEv1...

Cisco IOS XE Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Internet Key Exchange Version 2 IKEv2 module due to incorrect processing of certain IKEv2 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IKE...

DIGSI 5 Software DoS

The vulnerability of the DIGSI 5 software and the SIPROTEC 5 devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets to port 443/TCP...

Cisco IOS XE Software NAT DoS (cisco-sa-20160928-esp-nat)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the implementation of Network Address Translation NAT functionality due to improper handling of malformed ICMP packets by the affected software. An unauthenticated, remote attacke...

Cisco IOS XE Software IP Detail Record DoS (cisco-sa-20160928-ipdr)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the IP Detail Record IPDR due to improper handling of IPDR packets. An unauthenticated, remote attacker can exploit this, by sending crafted IPDR packets, to cause the device to...

CVE-2017-17224: NULL Pointer Dereference

Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206C00E205R3P1 have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal...

Cisco Ios Missing Release of Resource after Effective Lifetime

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service DoS condition. The vulnerability is due to...

Schneider Electric Industrial Automation Exception DoS

The vulnerabilities of systems for data collection and process control in Schneider Electric’s StruxureWare SCADA Expert, Vijeo Citect, Vijeo Citect, CitectSCADA, StruxureWare PowerSCADA Expert, and PowerLogic SCADA systems are related to improper handling of exceptions. Exploiting these...

Profinet software driver DoS

The vulnerability of the Profinet software driver for automation and control systems in industrial processes involves division by zero errors. Exploiting this vulnerability could allow a malicious actor to trigger service failures by sending specially crafted DCP packets...

Cisco IOS Software IP Service Level Agreement Denial of Service Vulnerability

According to its self-reported version, Cisco IOS Software is affected by a vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS software, which could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual...

SIP ALG DoS

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers stems from resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

Junos OS Routing Engine DoS

The vulnerability of the Routing Engine component of the Junos OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted IPv6 packets...

Next-Generation Multicast VPN Service Junos OS DoS

The vulnerability of the Next-Generation Multicast VPN NG-mVPN service in the Junos OS operating system is related to the lack of data validation during transmission. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IPv4 packets...