Cisco ASR 1000 Series Aggregation Services Routers Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. A vulnerability in the Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers in the code that reassembles fragmented IP...

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...

curl: incorrect handling of IP addresses in cookie domain

It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issu...

OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)

A flaw was found in the way the JSSE component in OpenJDK performed X.509 certificate identity verification when establishing a TLS/SSL connection to a host identified by an IP address. In certain cases, the certificate was accepted as valid if it was issued for a host name to which the IP addres...

kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.

It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets...

Cisco IP Communicator Denial of Service Vulnerability

Cisco IP Communicator is a suite of Windows PC-based softphone applications from Cisco. The program supports access to company phones, voicemail, etc. via a USB headset or USB speakerphone. A security vulnerability exists in Cisco IP Communicator version 8.64. A remote attacker could exploit this...

UBUNTU-CVE-2015-5144

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an 1 email message to the EmailValidator, a ...

Cisco IOS Software UBR Devices IPv6 VPN Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability in Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching allows remote attackers to quickly cause a denial of service by sending...

Cisco ASR 5000 Series Router GGSN TCP/IP Processing Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability in the processing of TCP messages in the GPRS Support Node GGSN of the Cisco ASR 50000 Series router gateway allows remote attackers to...

PT-2015-6870 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.0.6 Description: The issue concerns the udp recvmsg and udpv6 recvmsg functions in the Linux kernel, which do not properly consider yielding a processor. This allows remote attackers to cause a denial of...

Cisco ASA ICV Checksum IPSec/IKEv2 Message Content Modification Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in the Cisco Adaptive Security Appliance due to the AES-GCM code of the Cavium Networks cryptographic module component of the program failin...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2015-03854)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the IPv6 processing code of Cisco IOS XR Software allows an unauthenticated, remote attacker to exploit this vulnerability to cause a line card reload,...

virtio-win: netkvm: malformed packet can cause BSOD

It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a...

PT-2017-6647 · Netkvm +1 · Netkvm Windows Virtio Driver +1

Name of the Vulnerable Software and Affected Versions: NetKVM Windows Virtio driver affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a guest crash. This can be achieved by sending a crafted IP packet with a length value that...

Linux kernel 'ndisc_router_discovery()' function denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux kernel 'ndiscrouterdiscovery' function net/ipv6/ndisc.c. A local attacker can exploit this vulnerability by using special...

Linux Kernel net/ipv4/ping.c ping_unhash() function memory misreference local elevation of privilege vulnerability

Linux Kernel is an open source operating system. A memory misreference local elevation of privilege vulnerability in the pingunhash function in Linux Kernel net/ipv4/ping.c allows local attackers to exploit the vulnerability to execute arbitrary code with root privileges...

USN-2588-1 linux vulnerabilities

A stack overflow was discovered in the the microcode loader for the intel x86 platform. A local attacker could exploit this flaw to cause a denial of service kernel crash or to potentially execute code with kernel privileges. CVE-2015-2666 It was discovered that the Linux kernel's IPv6 networking...

The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information

The vulnerability of the ipsec-tools package up to version 0.6.7 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure device reboot by sending specially crafted IKEv2 packets over IPv4 or IPv6...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

The vulnerability of the TCP input component allows a remote attacker to trigger a service failure device reboot due to memory exhaustion by sending specially crafted TCP packets over IPv4 or IPv6...