QEMU: slirp: heap buffer overflow during packet reassembly

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the ipreass routine while reassembling incoming packets if the first fragment is bigger than the m-mdat buffer. An attacker could use this flaw to crash the QEMU process on the...

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris systems allows attackers to circumvent existing access control policies or cause service interruptions.

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies or cause service failures using a specially crafted IPv6 packet...

The vulnerability of VMware Workstation and VMware Fusion, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of VMware Workstation and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted IPv6 packet...

CVE-2019-14899

creationtimestamp| type| source ---|---|--- 2019-12-05 21:38:24+00:00| seen| https://t.me/ctinow/18348 2019-12-06 12:07:14+00:00| seen| https://t.me/ctinow/18363 2019-12-09 08:19:50+00:00| seen| https://t.me/thehackernews/553 2019-12-16 13:54:00+00:00| seen|...

Unspecified Vulnerability in Unbound IPSec Module

Unbound is a DNS resolver that supports authentication recursion and caching.IPSec is one of the Internet Security Protocol modules. A security vulnerability exists in the IPSec module in Unbound versions 1.6.4 through 1.9.4, which can be exploited by an attacker to execute shell code with the he...

Linux kernel input validation error vulnerability (CNVD-2019-40470)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An input validation error vulnerability exists in the net/ipv4/sysctlnetipv4.c file in versions of Linux kernel prior to 5.0.11. The vulnerability stems from a network...

Two Former Twitter Employees Caught Spying On Users For Saudi Arabia

Two former employees of Twitter have been charged with spying on thousands of Twitter user accounts on behalf of the Saudi Arabian government, likely with the purpose of unmasking the identity of dissidents. According to an indictment filed on November 5 and unsealed just yesterday, one of the...

glibc: getaddrinfo should reject IP addresses with trailing characters

In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...

kernel: out-of-bounds array access in __xfrm_policy_unlink

A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

Honeywell equIP Series and Performance Series IP Camera Access Control Error Vulnerability

Honeywell equIP H4L2GR1 and so on are an IP camera from Honeywell USA. An access control error vulnerability exists in the Honeywell equIP Series and Performance Series IP cameras, which can be exploited by an attacker to gain unauthorized access...

CVE-2019-5535

VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7...

The vulnerability of Norton Password Manager’s password manager module, related to errors in IP packet processing, allows a hacker to replace the IP address.

The vulnerability of the Norton Password Manager password manager is related to errors in IP packet processing. Exploiting this vulnerability could allow a malicious actor to replace the IP address...

The vulnerability in the implementation of ISDN functions in the Cisco IOS XE operating system for Cisco 4000 Series Integrated Services Routers allows a attacker to transmit IPv4 traffic through an unauthenticated ISDN connection for several seconds, from the initial setup of the ISDN connection until a failure in authentication of the PPP connection occurs.

The vulnerability of the Cisco IOS XE operating system’s ISDN function implementation for Cisco 4000 Series Integrated Services Routers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to transmit IPv4 traffic through an unauthenticated...

Zcash Unspecified Vulnerability in Zcashd

Zcash is a decentralized open source data currency. zcashd is the daemon for Zcash. An unspecified vulnerability in Zcashd in versions prior to Zcash 2.0.7-3 can be exploited by an attacker to disclose the IP address of a full node with a masked IP address...

The vulnerability of the IPv6 traffic processing service of the Cisco NX-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the IPv6 traffic processing service of the Cisco NX-OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE UTD Denial of Service Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the Unified Threat Defense UTD feature of Cisco IOS XE. The vulnerability stems from improper authentication of IPv6 packets by the UTD...

DEBIAN-CVE-2019-16410

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of headerlen checking...

CVE-2019-9680

Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include:...

Google Chrome IP Address Spoofing Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. A remote attacker can exploit the vulnerability to spoof IP addresses with the help of a specially crafted website...