security flaw

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

RHEL 4 : kernel (RHSA-2006:0101)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Null pointer dereference

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service firewall crash via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer...

CVE-2006-0054

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service firewall crash via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer...

CVE-2006-0054

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service firewall crash via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer...

CVE-2006-0054

Affected component: FreeBSD ipfw (6.0-RELEASE). Vulnerability: Remote attackers can crash the firewall by sending ICMP IP fragments that match actions (reset, reject, unreach), causing an access to an uninitialized pointer. Impact: Denial of service via firewall crash. Root cause: Incorrect handl...

CVE-2006-0054

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service firewall crash via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer...

PT-2006-1142 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD version 6.0-RELEASE Description: The issue allows remote attackers to cause a denial of service, leading to a firewall crash. This is achieved through ICMP IP fragments that match a reset, reject, or unreach action, resulting in acces...

ipfw -- IP fragment denial of service

Problem description: The firewall maintains a pointer to layer 4 header information in the event that it needs to send a TCP reset or ICMP error message to discard packets. Due to incorrect handling of IP fragments, this pointer fails to get initialized. Impact: An attacker can cause the firewall...

FreeBSD-SA-06:04.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:04.ipfw Security Advisory The FreeBSD Project Topic: ipfw IP fragment denial of service Category: core Module: ipfw Announced: 2006-01-11 Credits: Oleg Bulyzhi...

CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

CVE-2005-3810

ipconntrackprotoicmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service kernel oops via a message without ICMP ID ICMPID information, which leads to a null dereference...

CVE-2005-3810

ipconntrackprotoicmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service kernel oops via a message without ICMP ID ICMPID information, which leads to a null dereference...

CVE-2005-3810

ipconntrackprotoicmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service kernel oops via a message without ICMP ID ICMPID information, which leads to a null dereference...

p-smash DoS (ICMP 9 flood)

It was possible to crash the remote machine by flooding it with ICMP type 9 packets. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only According ...

scan for LaBrea tarpitted hosts

This script performs a labrea tarpit scan, by sending a bogus ACK and ACK-windowprobe to a potential host. It also sends a TCP SYN to test for non-persisting labrea machines. SPDX-FileCopyrightText: 2001 by John Lampe Some text descriptions might be excerpted from a referenced sources, and are...

'jolt2' DoS Vulnerability - Active Check

The machine or a gateway on the network path crashed when flooded with incorrectly fragmented packets. This is known as the SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linux SCTP ICMP Packet Handling Null Dereference Remote DoS

Linux kernels older than version 2.6.13 contain a bug that may allow an attacker to cause a NULL pointer dereference by sending malformed ICMP packets, thus resulting in a kernel panic. This flaw is present only if SCTP support is enabled on the remote host. An attacker can use this to make this...

ICMP and TCP timestamp attacks to reset TCP connections

By using different ICMP packet types and TCP timestamps values it's possible to cause TCP connection resets or performance decrease...

ICMP-based blind connection-reset attack

Folks, Here's the packet trace and the explanation of an ICMP-based blind connection-reset attack. In our sample scenario, a web-client 10.0.0.1, TCP port 3270 is downloading a file from a web-server 192.168.0.1, TCP port 80. If the TCP/IP implementations of both end-points are vulnerable,you can...