CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

CVE-2014-8160: Improper Input Validation

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

UBUNTU-CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

CVE-2014-7256

The 1 PPP Access Concentrator PPPAC and 2 Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers SEIL/x86 Fuji 1.00 through 3.22; SEIL/X1, SEIL/X2, and SEIL/B1 1.00 through 4.62; SEIL/Turbo 1.82 through 2.18; and SEIL/neu 2FE Plus 1.82 through 2.18 allow remote attackers to cause a...

Code injection

The 1 PPP Access Concentrator PPPAC and 2 Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers SEIL/x86 Fuji 1.00 through 3.22; SEIL/X1, SEIL/X2, and SEIL/B1 1.00 through 4.62; SEIL/Turbo 1.82 through 2.18; and SEIL/neu 2FE Plus 1.82 through 2.18 allow remote attackers to cause a...

CVE-2014-7256

The 1 PPP Access Concentrator PPPAC and 2 Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers SEIL/x86 Fuji 1.00 through 3.22; SEIL/X1, SEIL/X2, and SEIL/B1 1.00 through 4.62; SEIL/Turbo 1.82 through 2.18; and SEIL/neu 2FE Plus 1.82 through 2.18 allow remote attackers to cause a...

CVE-2014-7256: Undefined Security Weakness

The 1 PPP Access Concentrator PPPAC and 2 Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers SEIL/x86 Fuji 1.00 through 3.22; SEIL/X1, SEIL/X2, and SEIL/B1 1.00 through 4.62; SEIL/Turbo 1.82 through 2.18; and SEIL/neu 2FE Plus 1.82 through 2.18 allow remote attackers to cause a...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix two security issues, one bug, and add two enhancements are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Juniper Junos GRE DoS (PSN-2013-04-917)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted GRE packets received on a multicast tunnel interface that are allowed to reach the routing engine can cause the kernel to crash. An unauthenticated attacker on the same...

CVE-2012-4620

Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service interface queue wedge via tunneled 1 GRE/IP, 2 IPIP, or 3 IPv6 in IPv4 packets, aka Bug ID CSCts66808...

Design/Logic Flaw

Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service interface queue wedge via tunneled 1 GRE/IP, 2 IPIP, or 3 IPv6 in IPv4 packets, aka Bug ID CSCts66808...

CVE-2012-4620

Cisco IOS Software (12.2 and 15.0–15.2) on Cisco 10000 Series routers is affected when a tunnel interface exists. The vulnerability allows remote attackers to trigger a DoS via tunneled packets (GRE/IP, IPIP, or IPv6-in-IPv4) that cause an interface queue wedge. The root cause involves how tunnel...

CVE-2012-4620: Undefined Security Weakness

Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service interface queue wedge via tunneled 1 GRE/IP, 2 IPIP, or 3 IPv6 in IPv4 packets, aka Bug ID CSCts66808...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

Code injection

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

CVE-2011-3283: Improper Input Validation

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

Cisco IOS GRE Decapsulation Vulnerability

The remote device contains a flaw in the way GRE packets are handled. By sending a specially crafted GRE packet, an attacker can take advantage of this flaw to potentially bypass access-control lists. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17789;...

[USN-1268-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1268-1 November 21, 2011 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...