EUVD-2018-1192

Malware in sbrugna...

EUVD-2016-7309

Malware in sbrugna...

CVE-2019-16410

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...

PT-2019-14666

Name of the Vulnerable Software and Affected Versions Suricata version 4.1.4 Description An issue was discovered where sending multiple fragmented IPv4 packets causes the function Defrag4Reassemble in defrag.c to try to access a memory region that is not allocated. This occurs due to a lack of...

CVE-2019-16410: Out-of-bounds Read

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...

CVE-2018-0369

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...

PT-2018-8795

Name of the Vulnerable Software and Affected Versions Cisco Virtualized Packet Core-Single Instance VPC-SI affected versions not specified Cisco Virtualized Packet Core-Distributed Instance VPC-DI affected versions not specified Cisco Ultra Packet Core UPC affected versions not specified...

CVE-2018-0369: Improper Input Validation

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...

CVE-2017-3792: Improper Input Validation

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability is due to improper size validation when...

Memory corruption

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

CVE-2016-6386: Undefined Security Weakness

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

CVE-2015-4291: Undefined Security Weakness

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...

CVE-2015-4293: Undefined Security Weakness

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...

CVE-2013-1218: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules before 7.17sp1E4 allows remote attackers to cause a denial of service Analysis Engine process hang or device reload via fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCue51272...

PT-2013-2981

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules versions prior to 7.17sp1E4 Description The issue allows remote attackers to cause a denial of service, resulting in either the Analysis Engine process hangi...

PT-2013-4340

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances ASA Next-Generation Firewall module versions 9.x through 9.1.1.8 Cisco Adaptive Security Appliances ASA Next-Generation Firewall module versions 9.1.2.x through 9.1.2.11 Description The issue allows remote...

CVE-2013-3382: Improper Input Validation

The Next-Generation Firewall aka NGFW, formerly CX Context-Aware Security module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service device reload or traffic-processing outage via fragmented 1 IPv4 ...

Security Advisory FreeBSD-SA-01:52.fragment

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:52 Security Advisory FreeBSD, Inc. Topic: Denial of service using fragmented IPv4 packets Category: kernel Announced: 2001-08-06 Credits: "James Thomas" via NetBSD Affect...