Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...

Microprogramming software for Siemens SIPROTEC 4 relay protection microprocessors

The vulnerability of the software of the Siemens SIPROTEC 4 relay protection micro-processor terminal allows a remote attacker to cause a malfunction of the micro-processor terminal by sending a specially crafted UDP packet to port 50000. This causes the micro-processor terminal to cease...

The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.

A memory leak in d1both.c during the implementation of DTLS for OpenSSL allows malicious actors operating remotely to trigger a service failure excessive memory consumption by using empty DTLS fragments, which cause incorrect processing of return values from the insertion function...

The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...

The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.

Double liberation in d1both.c, within the implementation of DTLS for OpenSSL, allows malicious actors operating remotely to cause service failure abrupt termination of the application by using specially crafted DTLS packets that trigger errors...

The vulnerability of the Cisco Unified Communications Manager software allows a malicious actor to execute arbitrary code.

The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...

The vulnerability of Cisco IPS software allows a malicious actor to trigger a service failure.

The vulnerability in the dtls1getmessagefragment function in d1both.c of OpenSSL allows malicious actors to induce a service failure recursion and abnormal client termination by using the DTLS hello message in an invalid manner...

The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in the sysrecvfrom function of nmbd in Samba allows malicious actors operating remotely to cause service interruptions lockup and excessive processor resource consumption by using improperly formed UDP packets...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure

Improper processing of IPv6 sockets using the UDPCORK option in the udpv6pushpendingframes function can lead to service failures...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure

A local user can trigger a service failure when using the RDS network protocol through Infiniband channels...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains a vulnerability in the Internet Key Exchange IKE protocol. This vulnerability allows a malicious attacker to send specially crafted IKE packets to any of the UDP ports 500, 848, 4500, or 4848. This causes the router to restart and trigger a “service failure”...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the Resource Reservation Protocol RSVP, which allows a malicious attacker to trigger a “service failure” by sending specially crafted UDP RSVP packets...

kernel: net: incorrect processing of checksums in UDP implementation

A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...

kernel: net: incorrect processing of checksums in UDP implementation

A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...

kernel: net: incorrect processing of checksums in UDP implementation

A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...

kernel: net: incorrect processing of checksums in UDP implementation

A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...

UBUNTU-CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

The vulnerability of the Nginx proxy server allows attackers to induce a service failure.

The vulnerability of the Nginx proxy server is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to cause a service failure incorrect pointer dereferencing and emergency termination of operations through a specially crafted UDP DNS response...

Cisco IOS and IOS XE Software Internet Key Exchange Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the IKE version 2 fragmentation code in Cisco IOS and IOS XE Software due to the program failing to properly handle fragmented IKEv2 packets. A remote attacker...