862 matches found
CVE-2018-8493
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...
CVE-2018-8493
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...
QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams
A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process resulting in DoS...
Windows TCP/IP Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have ...
PT-2018-2078 · Microsoft · Windows 10 Servers +6
Name of the Vulnerable Software and Affected Versions: Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description: An information disclosure issue exists due to the improper handling of fragmented IP packets by the Windows TCP/IP stack. This ca...
EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2018-1314)
According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 - QEMU: i386: multiboot OOB access while loading kern...
EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2018-1313)
According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 - QEMU: i386: multiboot OOB access while loading kern...
QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams
A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process resulting in DoS...
Important: qemu-kvm
Issue Overview: A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process...
SUSE SLES11 Security Update : kvm (SUSE-SU-2018:2615-1) (Spectre)
This update for kvm fixes the following security issues : CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causing DoS bsc1098735...
SUSE SLES12 Security Update : xen (SUSE-SU-2018:2081-1)
This update for xen fixes the following issues: Security issues fixed : - CVE-2018-12891: Fix preemption checks bypass in x86 PV MM handling XSA-264 bsc1097521. - CVE-2018-12892: Fix libxl failure to honour readonly flag on HVM emulated SCSI disks XSA-266 bsc1097523. - CVE-2018-12893: Fix DB...
Input validation
A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...
CVE-2018-0369
A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...
CVE-2018-11806
mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams...
CVE-2018-11806
mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams...
DEBIAN-CVE-2018-11806
mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams...
Heap overflow
mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams...
CVE-2018-11806
mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams...
