EUVD-2018-1192

Malware in sbrugna...

EUVD-2016-7309

Malware in sbrugna...

CVE-2019-16410

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...

CVE-2019-16410: Out-of-bounds Read

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...

PT-2019-14666

Name of the Vulnerable Software and Affected Versions Suricata version 4.1.4 Description An issue was discovered where sending multiple fragmented IPv4 packets causes the function Defrag4Reassemble in defrag.c to try to access a memory region that is not allocated. This occurs due to a lack of...

CVE-2018-0369

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...

CVE-2018-0369: Improper Input Validation

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...

PT-2018-8795

Name of the Vulnerable Software and Affected Versions Cisco Virtualized Packet Core-Single Instance VPC-SI affected versions not specified Cisco Virtualized Packet Core-Distributed Instance VPC-DI affected versions not specified Cisco Ultra Packet Core UPC affected versions not specified...

Memory corruption

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

CVE-2016-6386: Undefined Security Weakness

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

PT-2013-2981

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules versions prior to 7.17sp1E4 Description The issue allows remote attackers to cause a denial of service, resulting in either the Analysis Engine process hangi...

Security Advisory FreeBSD-SA-01:52.fragment

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:52 Security Advisory FreeBSD, Inc. Topic: Denial of service using fragmented IPv4 packets Category: kernel Announced: 2001-08-06 Credits: "James Thomas" via NetBSD Affect...