OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries...

kernel: handling of IPv6 temporary addresses

The ipv6createtempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service excessive retries and address-generation outage, and consequently...

PT-2013-4859 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.10.1 Description: The issue is related to the handling of Router Advertisement RA messages in the IPv6 stack. Specifically, the fib6 add rt2node function in net/ipv6/ip6 fib.c does not properly handle certain...

kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm()

net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via certain types of fragmented IPv6 packets...

DEBIAN-CVE-2011-1138

Off-by-one error in the dissect6lowpaniphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service application crash via a malformed 6LoWPAN IPv6 packet...

PT-2011-2315 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.11 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.1 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

CVE-2009-2208

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFOIN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU...

PT-2006-5360 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.16.31 Description: The issue allows remote attackers to bypass rules in ip6 tables in netfilter. This can be achieved in two ways: 1 by sending a packet with the protocol header not located immediately after...

security flaw

Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...

PT-2004-1858 · Apache · Apache +2

Name of the Vulnerable Software and Affected Versions: Apache versions prior to 2.0.51 Description: The issue is related to the IPv6 URI parsing routines in the apr-util library, which can be exploited by remote attackers to cause a denial of service, specifically a child process crash, by sendin...

PT-2004-1331 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python versions 2.2 through 2.2.1 Description: A buffer overflow issue exists in the getaddrinfo function when IPv6 support is disabled, allowing remote attackers to execute arbitrary code via an IPv6 address obtained using DNS...