Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to an improper handling of crafted, fragmented IKEv2 packets. An...

The vulnerabilities of the FlexNet Publisher software management tool allow a perpetrator to execute arbitrary code.

The multiple vulnerabilities of the lmgrd and Vendor Daemon components of the FlexNet Publisher license management software are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code remotely, using a specially crafted package...

PT-2019-2418 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.4.182 Linux kernel versions prior to 4.9.182 Linux kernel versions prior to 4.14.127 Linux kernel versions prior to 4.19.52 Linux kernel versions prior to 5.1.11 Description: The issue is caused by the Linux...

Apache ActiveMQ Shutdown Command Denial of Service (CVE-2014-3576)

A denial of service vulnerability exists in Apache ActiveMQ. The vulnerability is due to missing authentication for the undocumented shutdown command. A remote, unauthenticated attacker may exploit this vulnerability by sending crafted packets to the server. Successful exploitation could lead to ...

wireshark-cli: denial of service

CVE-2016-2522: The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service out-of-bounds read and application...

wireshark-qt: denial of service

CVE-2016-2522: The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service out-of-bounds read and application...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Broadcom Wi-Fi driver for the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a hacker to execute arbitrary code or cause a service failure memory corruption by using specially crafted message packets...

CVE-2016-2532

The dissectllrpparameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted...

DEBIAN-CVE-2016-2532

The dissectllrpparameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted...

DEBIAN-CVE-2016-2525

epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

UBUNTU-CVE-2016-2532

The dissectllrpparameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted...

UBUNTU-CVE-2016-2528

The dissectnhdrextopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-01126)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the implementation of Cisco IOS 15.24E on Industrial Ethernet 2000 devices, which can be exploited by a remote attacker to cause a device reload an...

CVE-2016-1330

Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...

CVE-2016-2200

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

DEBIAN-CVE-2015-8787

The nfnatredirectipv4 function in net/netfilter/nfnatredirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured...

Juniper Junos OS Denial of Service Vulnerability

Juniper Networks is a network communications equipment company that supplies IP networking and information security solutions. Juniper Junos OS with RTSP ALG enabled can cause a process crash when processing certain constructed RTSP packets, resulting in a denial of service flowd crash...

SUSE SLED11 / SLES11 Security Update : wireshark (SUSE-SU-2016:0110-1)

This update contains Wireshark 1.12.9 and fixes the following issues : - CVE-2015-7830: pcapng file parser could crash while copying an interface filter bsc950437 - CVE-2015-8711: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not...

F5 Networks BIG-IP : SNMP vulnerability (K17378)

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

Debian DSA-3442-1 : isc-dhcp - security update

It was discovered that a maliciously crafted packet can crash any of the isc-dhcp applications. This includes the DHCP client, relay, and server application. Only IPv4 setups are affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...