F5 Networks BIG-IP : Linux kernel vulnerability (K17403481)

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for DB exceptions that are deferred by MOV SS or POP SS, as demonstrated ...

F5 Networks BIG-IP : TMM vulnerability (K25573437)

Malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs. CVE-2018-5517 Impact This vulnerability allows remotedisruption of...

F5 Networks BIG-IP : TMM vulnerability (K07369970)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the 'HTTP/2 profile' may result in a disruption of service to TMM. CVE-2017-6151...

F5 Networks BIG-IP : TMM vulnerability (K10930474)

Malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure. CVE-2017-6155 Impact An attacker may be able to disrupt traffic or cause the BIG-IP system ...

kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment()

A security flaw was found in the ipfragreasm function in net/ipv4/ipfragment.c in the Linux kernel which can cause a later system crash in ipdofragment. With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash remotely, thus leading to a remote...

The vulnerability of the XML file analyzer in the libxml2 library allows a hacker to trigger a service failure.

The vulnerability of the XML file analyzer in the libxml2 library arises from insufficient restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted XML document...

The vulnerability of the xmlStringLenDecodeEntities function (parser.c) in the libxml2 library allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the xmlStringLenDecodeEntities function in the parser.c file of the libxml2 library is due to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or disclose protected informati...

The vulnerability of the web interface of the microprogramming software-based network interface cards Cisco RV110W Wireless-N VPN and the multi-functional VPN routers Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the web interfaces of Cisco RV110W Wireless-N VPN and Cisco RV130W Wireless-N, as well as Cisco RV215W Wireless-N VPN microprogramming-based network interface devices, is related to buffer overflow attacks in memory. Exploiting this vulnerability can allow an attacker to...

Unspecified Vulnerability in Oracle Fusion Middleware Identity Manager

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Identity Manager is one of the enterprise identity management system components. An unspecifi...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30952)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Sudo subcomponent of the Solaris component of the Oracle Sun Systems Products Suite, version...

CVE-2018-3266

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Verified Boot. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3179

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware subcomponent: Advanced Console. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from privilege management errors, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is caused by privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

The vulnerability in the implementation of the SMB network protocol of the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Microsoft Server Message Block SMB network protocol in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted SMB requests to the...

Apache SpamAssassin Denial of Service Vulnerability

Apache SpamAssassin is a U.S. Apache Apache company's mail filtering program and API, can effectively prevent mail from spam harassment. A denial of service vulnerability exists in Apache SpamAssassin. An attacker can exploit the vulnerability to cause a denial of service...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19573)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in 'wmananrspeventhandler' in Android. An attacker could exploit the vulnerability to execute arbitrary code or cause a denial of service...

SANS THIR Summit Wrap Up – “We Have 15 Minutes”

Heading back to San Diego before I get on another flight 30 hours later. Lots of people say "what are you crazy? Why do that?"…to which I say: "we cannot achieve any mission without sacrifice." Going to events like the SANS Threat Hunting IR summit remind just how many dedicated people we have on...

The vulnerability of the components menu_pxc.cgi and index.cgi of the microprogramming system for controlled switches from FL SWITCH by Phoenix Contact allows a hacker to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the components menupxc.cgi and index.cgi of the microprogramming software for controlled switches from FL SWITCH Phoenix Contact arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary...

UDP based applications may get affected when traffic processing is disabled on the SDWAN

On the video conference tool based of IPSEC UDP, Master node isn't able to see the remote nodes sitting behind the SDWAN-WanOP. This tool uses dynamic IPSEC tunnels over the WAN and passes through our WanOP...

CVE-2018-5243

The Symantec Encryption Management Server SEMS product, prior to version 3.4.2 MP1, may be susceptible to a denial of service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by...