openstack-nova: Nova network denial of service through API filtering

A denial of service flaw was found in the way OpenStack Compute nova looked up VM instances based on an IP address filter. An attacker with sufficient privileges on an OpenStack installation with a large amount of VMs could use this flaw to cause the main nova process to block for an extended...

'Net neutrality' — Save The Internet Before It's Too Late

Perhaps you have heard about "Net Neutrality," and the recent controversies over it in India. But first let’s understand What does Net Neutrality mean? Net Neutrality is simply the Internet Freedom — Free, Fast and Open Internet for all. Net Neutrality is the principle that Internet service...

Apple iOS ICMP User Redirection Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has ICMP redirection enabled by default, which allows attackers to exploit a vulnerability to redirect user communications to an arbitrary host...

Linux kernel IPv4 Denial of Service Vulnerability

The Linux Kernel is the kernel of the Linux operating system. The IPv4 implementation in versions of Linux kernel prior to 3.18.8 fails to properly calculate the length of the RCU grace period, which could allow a remote attacker to cause a denial of service memory exhaustion or system crash via ...

Cisco IOS XE Layer 4 Redirect (L4R) Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in the Cisco IOS XE Layer 4 Redirect L4R feature allows remote attackers to exploit the vulnerability to conduct denial of service attacks via specially crafted IPv4 or IPv6 messages...

Cisco IOS XE Common Flow Table (CFT) Malformed IPv6 Message Handling Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in the Cisco IOS XE Common Flow Table CFT feature allows remote attackers to conduct denial-of-service attacks by sending malformed IPv6 messages encapsulating IPv4 UDP...

UBUNTU-CVE-2015-0261

Integer signedness error in the mobilityoptprint function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read and crash or possibly execute arbitrary code via a negative length value...

Cisco Unified IP Phones 9900 Series Arbitrary File Upload Vulnerability

Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. An arbitrary file upload vulnerability exists in the Cisco Unified IP Phones 9900 Series, which could be exploited by an attacker to upload arbitrary file...

Apple MAC OS X Yosemite Information Disclosure Vulnerability (CNVD-2015-00761)

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite Spotlight fails to check the status of Mail's "Load remote content in messages" setting, which can result in the sender of an email being able to determine the recipient's IP address information...

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00467)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris that allows attackers to exploit the 'TCP/IP' protocol to compromise the 'Network' subcomponent...

DEBIAN-CVE-2014-3613

cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1...

shim: heap-based buffer overflow flaw in IPv6 address parsing

A heap-based buffer overflow flaw was found the way shim parsed certain IPv6 addresses. If IPv6 network booting was enabled, a malicious server could supply a crafted IPv6 address that would cause shim to crash or, potentially, execute arbitrary code...

PT-2014-5463

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions prior to 2014.1.4 OpenStack Compute Nova versions 2014.2.x prior to 2014.2.1 Description The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, by exploiting an I...

DEBIAN-CVE-2014-7284

The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by...

openstack-neutron: L3-agent denial of service through IPv6 subnet

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service IPv4 address attachment outage by attaching an IPv6 private subnet to a L3 router...

SX-2000WG vulnerable to denial-of-service (DoS)

Overview SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of IP packets, which may cause a denial-of-service DoS. Note that this vulnerability is...

Microsoft Windows 2000/XP Internet Protocol Validation Remote Code Execution Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/13116/info Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform receives and processes an especially malformed...

Kernel: net: IPv6: panic when UFO=On for an interface

net/ipv6/ip6output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload UFO processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service memory corruption and system crash or...

CentOS Update for openswan CESA-2014:0185 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not comment...