Debian DSA-2952-1 : kfreebsd-9 - security update

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or possibly disclosure of kernel memory. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-1453 A remote, authenticated attacker could cause the NF...

kernel: vhost-net: insufficiency in handling of big packets in handle_rx()

drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...

Cisco Adaptive Security Appliance Software Crafter RADIUS Packets Denial of Service Vulnerability

A vulnerability in the implementation of the Remote Authentication Dial-in User Services RADIUS code of Cisco ASA Software could allow an authenticated, remote attacker to cause an affected system to reload. The vulnerability is due to insufficient validation of RADIUS packets including crafted...

Ecava IntegraXor Buffer Overflow (CVE-2010-4597)

A remote code execution vulnerability has been reported in Ecava IntegraXor. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...

Microsoft iSCSI Denial of Service Vulnerabilities (2962485)

This host is missing an important security update according to Microsoft Bulletin MS14-028. OpenVAS Vulnerability Test $Id: gbms14-028.nasl 6769 2017-07-20 09:56:33Z teissa $ Microsoft iSCSI Denial of Service Vulnerabilities 2962485 Authors: Veerendra GG Copyright: Copyright C 2014 Greenbone...

MS14-028: Vulnerabilities in iSCSI Could Allow Denial of Service (2962485)

The remote Windows host is affected by multiple denial of service vulnerabilities due to Windows improperly handling iSCSI packets. A remote attacker could send large amounts of specially crafted iSCSI packets to the host and cause the system to stop responding until it is restarted. C Tenable...

MS14-028: Vulnerabilities in iSCSI could allow denial of service: May 13, 2014

Resolves vulnerabilities in Windows that could allow denial of service if an attacker sends large amounts of specially crafted iSCSI packets over the target network. This vulnerability affects only those servers for which the iSCSI target role is enabled.INTRODUCTIONMicrosoft has released securit...

Cisco TelePresence MXP Series Software Multiple Vulnerabilities (cisco-sa-20140430-mxp)

The version of Cisco TelePresence MXP Series software running on the remote host is affected by one or more of the following issues : - A denial of service vulnerability exists due to a flaw in the SIP implementation, potentially allowing a remote attacker to cause a device reload by sending...

CVE-2014-3000

The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service undefined memory access and system crash or possibly read system memory via multiple crafted packets,...

Code injection

The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service undefined memory access and system crash or possibly read system memory via multiple crafted packets,...

CVE-2014-3000

The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service undefined memory access and system crash or possibly read system memory via multiple crafted packets,...

CVE-2014-2161

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

CVE-2014-2160

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45745...

CVE-2014-2159

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCtq78722...

Command injection

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45745...

Code injection

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

CVE-2014-2161

The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCty45731...

Cisco Adaptive Security Appliance Software SIP Inspection Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP inspection engine code could allow an unauthenticated, remote attacker to cause a slow memory leak, which may cause instability on the affected system. The vulnerability is due to improper handling of SIP packets inspected by the Cisco Adapti...

CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Memory corruption

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...