462 matches found
DEBIAN-CVE-2014-9428
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
Design/Logic Flaw
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
CVE-2014-9428
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
CVE-2014-9428
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
CVE-2014-9428
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
UBUNTU-CVE-2014-9428
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
CVE-2014-9428: Undefined Security Weakness
The batadvfragmergepackets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service mesh-node system crash...
CVE-2014-6380: Undefined Security Weakness
Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X5...
PT-2014-7201
Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 before R11 Juniper Junos versions 12.1 before R9 Juniper Junos versions 12.1X44 before D30 Juniper Junos versions 12.1X45 before D20 Juniper Junos versions 12.1X46 before D15 Juniper Junos versions 12.1X47 before D1...
Juniper Junos 'em' Interface Fragmentation Remote DoS (JSA10655)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. A remote attacker can exploit this issue by sending a set of specially crafted fragmented packets to cause the 'em' driver to become permanently blocked when trying to...
Check Point Software Firewall-1 4.0/1 4.1 Fragmented Packets DoS
No description provided by source. source: http://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available processor time logging these packets. The FireWall-1...
Novell Netware 5.0 SP5/6.0 SP1 SMDR.NLM Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1467/info When Novell Netware is configured with IPX-Compatibility enabled, it is vulnerable to a denial of service attack by sending packets with random data to port 40193. Similar results are possible by sending...
kernel: net: inet frag code race condition leading to user-after-free
Race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service use-after-free error or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system wi...
FreeBSD TCP fragments memory corruptions
Memory corruptions on fragmented packets ressembly...
CVE-2014-0100
Race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service use-after-free error or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system wi...
DEBIAN-CVE-2014-0100
Race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service use-after-free error or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system wi...
Code injection
The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...
CVE-2014-0718
The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...
PT-2014-1309
Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions 7.1 through 7.18E4 Cisco IPS Software versions 7.2 through 7.22E4 Description The issue allows remote attackers to cause a denial of service, resulting in an Analysis Engine process outage, by utilizing fragmented...
CVE-2014-0718: Improper Input Validation
The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...