CVE-2017-6731

CVE-2017-6731 affects Cisco IOS XR Software in the Multicast Source Discovery Protocol (MSDP) ingress packet processing. An unauthenticated, remote attacker can trigger a short DoS by sending malformed MSDP packets to an established MSDP session, causing the session to reset and restart within se...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2017-22327)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS XR, where a remote attacker can cause a denial of service process reload by sending constructed Source Discovery Protocol MSDP...

Cisco IOS XR Software Multicast Source Discovery Protocol Session Denial of Service Vulnerability (cisco-sa-20170705-iosxr)

A vulnerability in Multicast Source Discovery Protocol MSDP ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service DoS condition. The MSDP session will restart within...

IPv6 Address Spoofing: sylkie

IPv6 Address Spoofing A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Dependencies libseccomp json-c Build Get the code and compile it! Get the code git clone...

PT-2017-2789 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 4.4.4 through 8.0 Description: A information disclosure vulnerability in the Android system's bluetooth component allows an attacker to send a set of requests to a server and disclose a bit of memory in the response. The...

The vulnerability of the Junos operating system allows a perpetrator to trigger a system failure and restart the device.

The vulnerability of the LDP configuration in the Junos operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device remotely...

UBUNTU-CVE-2017-5042

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...

Ubiquiti Inc.: UBNT Amplification DDOS Attack

Denial of Service attack in airMAX prior to 8.3.2 , airMAX prior to 6.0.7 and EdgeMAX prior to 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks...

CVE-2016-6392

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

Design/Logic Flaw

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

CVE-2016-6392

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

FreeBSD : FreeBSD -- Denial of Service with IPv6 Router Advertisements (0bb55a18-600a-11e6-a6c3-14dae9d210b8)

The Neighbor Discover Protocol allows a local router to advertise a suggested Current Hop Limit value of a link, which will replace Current Hop Limit on an interface connected to the link on the FreeBSD system. Impact : When the Current Hop Limit similar to IPv4's TTL is small, IPv6 packets may g...

CVE-2016-1465

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...

CVE-2016-1465

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...

Out-of-bounds

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...

CVE-2016-1465

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...

Cisco Nexus 1000v Application Virtual Switch Denial of Service Vulnerability

Cisco Nexus 1000v Application Virtual Switch AVS is a suite of virtual switch software developed specifically for virtual machines by Cisco. The software is used to replace Vmware's built-in distributed virtual switch, and contains a hypervisor running inside the Virtual Ethernet Module VEM and...

CVE-2016-1465: Undefined Security Weakness

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...

Cisco Nexus 1000v Application Virtual Switch Cisco Discovery Protocol Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco Discovery Protocol packet processing for the Cisco Nexus 1000v Application Virtual Switch AVS could allow an unauthenticated, remote attacker to cause the ESXi hypervisor to crash and display a purple diagnostic screen, resulting in a denial of service DoS condition. The...

PT-2016-4813

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000v Application Virtual Switch AVS versions prior to 5.21SV31.5i Description A denial of service issue exists due to insufficient input validation of Cisco Discovery Protocol packets, which could result in an out-of-bounds memory...