2102 matches found
Ubuntu: Security Advisory (USN-3071-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Stack Buffer Overflow Vulnerability in OsmoCOM Osmo-TRX/Osmo-BTS
Osmocom is a series of projects on open source mobile communications, including software tools for GSM, DECT, TETRA and other mobile communication standards. A stack buffer overflow vulnerability exists in OsmoCOM Osmo-TRX/Osmo-BTS. An attacker could exploit the vulnerability by sending an...
Stack Buffer Overflow Vulnerability in Legba Incorporated YateBTS
Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A stack buffer overflow vulnerability exists in Legba Incorporated YateBTS. An attacker could exploit the vulnerability by sending an oversized UDP packet resulting in a memory buffer overflow, which in turn could...
CVE-2016-2179
It was discovered that the Datagram TLS DTLS implementation could fail to release memory in certain cases. A malicious DTLS client could cause a DTLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory...
Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)
Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...
Microprogramming software for Siemens SIPROTEC 4 relay protection microprocessors
The vulnerability of the software of the Siemens SIPROTEC 4 relay protection micro-processor terminal allows a remote attacker to cause a malfunction of the micro-processor terminal by sending a specially crafted UDP packet to port 50000. This causes the micro-processor terminal to cease...
The vulnerability of Cisco IPS software allows a malicious actor to trigger a service failure.
The vulnerability in the dtls1getmessagefragment function in d1both.c of OpenSSL allows malicious actors to induce a service failure recursion and abnormal client termination by using the DTLS hello message in an invalid manner...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.
Double liberation in d1both.c, within the implementation of DTLS for OpenSSL, allows malicious actors operating remotely to cause service failure abrupt termination of the application by using specially crafted DTLS packets that trigger errors...
The vulnerability of the Cisco Unified Communications Manager software allows a malicious actor to execute arbitrary code.
The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...
The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in the sysrecvfrom function of nmbd in Samba allows malicious actors operating remotely to cause service interruptions lockup and excessive processor resource consumption by using improperly formed UDP packets...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.
A memory leak in d1both.c during the implementation of DTLS for OpenSSL allows malicious actors operating remotely to trigger a service failure excessive memory consumption by using empty DTLS fragments, which cause incorrect processing of return values from the insertion function...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
Improper processing of IPv6 sockets using the UDPCORK option in the udpv6pushpendingframes function can lead to service failures...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure
Cisco IOS software contains a vulnerability in the Internet Key Exchange IKE protocol. This vulnerability allows a malicious attacker to send specially crafted IKE packets to any of the UDP ports 500, 848, 4500, or 4848. This causes the router to restart and trigger a “service failure”...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
A local user can trigger a service failure when using the RDS network protocol through Infiniband channels...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”
Cisco IOS software contains a vulnerability in the Resource Reservation Protocol RSVP, which allows a malicious attacker to trigger a “service failure” by sending specially crafted UDP RSVP packets...
kernel: net: incorrect processing of checksums in UDP implementation
A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...
kernel: net: incorrect processing of checksums in UDP implementation
A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...
kernel: net: incorrect processing of checksums in UDP implementation
A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...
kernel: net: incorrect processing of checksums in UDP implementation
A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...