QEMU '/hw/net/net_tx_pkt.c' Packet Fragmentation Denial of Service Vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial-of-service vulnerability exists in the QEMU '/hw/net/nettxpkt.c' package fragment, which allows an attacker to exploit the vulnerability to crash the...

Fedora 22 : nfdump (2016-3b49c9aa49)

nfdump 1.6.15 released. --- - Fix Security issue http://www.security-assessment.com/files/documents/advis ory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabil ities.pdf - Fix obyte, opps and obps output records - Fix wrong bps type case in cvs output. Fix opbs ipbs typos nfdump 1.6.14 release...

Fedora 24 : nfdump (2016-a771d67ba0)

nfdump 1.6.15 released. --- - Fix Security issue http://www.security-assessment.com/files/documents/advis ory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabil ities.pdf - Fix obyte, opps and obps output records - Fix wrong bps type case in cvs output. Fix opbs ipbs typos nfdump 1.6.14 release...

Vulnerability of the OpenSSL software, which allows a malicious attacker to compromise protected information

The vulnerability in the ssl23getclienthello function of s23srvr.c for OpenSSL allows a malicious actor to downgrade the TLS protocol version by fragmenting the ClientHello message during data exchange between the client and servers that support newer versions of the protocol...

Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to an improper handling of crafted, fragmented IKEv2 packets. An...

The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code or cause a service failure

The vulnerability of the MPEG4Source::fragmentedRead function in the libstagefright library of the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory...

Cisco IOS XE IKEv2 Fragmentation DoS (cisco-sa-20160323-ios-ikev2)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of fragmented IKEv2 packets. An unauthenticated, remote attacker can...

Cisco IOS IKEv2 Fragmentation DoS (cisco-sa-20160323-ios-ikev2)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of fragmented IKEv2 packets. An unauthenticated, remote attacker can exploit...

Cisco IOS and IOS XE Software Internet Key Exchange Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the IKE version 2 fragmentation code in Cisco IOS and IOS XE Software due to the program failing to properly handle fragmented IKEv2 packets. A remote attacker...

Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to an improper handling of crafted, fragmented IKEv2 packets. An...

Cisco ASA / IOS IKE Fragmentation Vulnerability

The remote Cisco Adaptive Security Appliance ASA or device running IOS / IOS XE is affected by one of the following vulnerabilities in the Internet Key Exchange IKE implementation : - An overflow condition exists in both the IKE and IKEv2 implementations due to improper validation of user-supplie...

Android WebView remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

In the past period of time, the WebView remote code execution vulnerability can be said to be swept a large number of the Android App query some vulnerabilities of the platform can be substantially the case, given the many loopholes in the App and not disclosed, and therefore WebVeiw remote code...

USN-2777-1 linux-lts-utopic vulnerabilities

It was discovered that virtio networking in the Linux kernel did not handle fragments correctly, leading to kernel memory corruption. A remote attacker could use this to cause a denial of service system crash or possibly execute code with administrative privileges. CVE-2015-5156 Benjamin Randazzo...

USN-2776-1 linux vulnerabilities

It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route advertisement with an invalid MTU that a user space daemon like NetworkManager would honor and apply to the kernel, causing a denial of service...

Oracle: Security Advisory (ELSA-2015-3014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-3015)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2015:1727-1 Security update for kernel-source

The SUSE Linux Enterprise 12 kernel was updated to 3.12.48-52.27 to receive various security and bugfixes. Following security bugs were fixed: CVE-2015-7613: A flaw was found in the Linux kernel IPC code that could lead to arbitrary code execution. The ipcaddid function initialized a shared objec...

F5 BIG-IP FastL4 Virtual Server Message Handling Denial of Service Vulnerability

F5 BIG-IP APM is a globally unified access and security solution for business-critical applications and networks. A security vulnerability exists in F5 BIG-IP that allows a remote attacker to exploit the vulnerability to submit a special fragmentation message that causes the TMM to reboot,...

Amazon Linux: Security Advisory (ALAS-2013-252)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2011-26)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...