11317 matches found
Design/Logic Flaw
A vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packets. An attacker could explo...
CVE-2017-6610
A vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to insufficient validation of the IKEv1 XAUTH parameters passed during an IKEv1 negotiation...
CVE-2017-6608
Cisco ASA Software SSL/TLS Denial of Service vulnerability (CVE-2017-6608) allows an unauthenticated, remote attacker to cause a reload by sending crafted SSL/TLS packets. Affected products include Cisco ASA 1000V Cloud Firewall, ASA 5500 Series, ASA 5500-X Series, ASA Services Module, ASA 7600, ...
CVE-2017-6609
A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...
CVE-2017-6608
A vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packets. An attacker could explo...
Juniper Junos Routing Protocol Daemon LDP Packet DoS (JSA10777)
According to its self-reported version and configuration, the remote Juniper Junos device is affected by a memory leak issue in the routing protocol daemon rpd when handling a specific LDP packet, which over time will consume memory that cannot be freed without restarting the rpd process. An...
Cisco ASA Software Internet Key Exchange Version 1 XAUTH Denial of Service Vulnerability (cisco-sa-20170419-asa-xauth)
A vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...
Fedora 25 : 2:qemu (2017-01925dba3c)
chardev data is dropped when host side closed bz 1352977 - CVE-2016-8667: dma: divide by zero error in setnexttick bz 1384876 - IPv6 DNS problems in qemu user networking bz 1401165 - Fix crash in qxl memslotgetvirt bz 1405847 - CVE-2017-5579: serial: fix memory leak in serial exit bz 1416161 -...
Juniper Junos for EX Series Switches IPv6 Neighbor Discovery DoS (JSA10781)
According to its self-reported version, the remote Juniper Junos EX Series device is affected by a memory leak issue in IPv6 processing when handling a specially crafted IPv6 Neighbor Discovery ND packet. An unauthenticated, remote attacker can exploit this, via a malicious network-based flood of...
Juniper Junos for M/MX Series Routers IPv6 Neighbor Discovery DoS (JSA10786)
According to its self-reported version and configuration, the remote Juniper Junos M/MX Series device is affected by a denial of service vulnerability in a Packet Forwarding Engine PFE when processing IPv6 neighbor discovery ND packets that originate from subscribers and are destined to M/MX seri...
Cisco ASA Software IPsec Denial of Service Vulnerability
A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...
Cisco ASA Software Internet Key Exchange Version 1 XAUTH Denial of Service Vulnerability
A vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to insufficient validation of the IKEv1 XAUTH parameters passed during an IKEv1 negotiation...
Cisco Wireless LAN Controller IPv6 UDP Packet Handling DoS (cisco-sa-20170405-wlc2)
According to its self-reported version, the Cisco Wireless LAN Controller WLC software running on the remote device is affected by a denial of service vulnerability in the IPv6 UDP ingress packet processing functionality due to incomplete IPv6 UDP header validation. An unauthenticated, remote...
Juniper Networks Junos OS PFE DoS Vulnerabilities
Junos OS is prone to a denial of service vulnerability while handling IPv6 ND advertisements. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
Juniper Networks Junos OS EX Series DoS Vulnerability
Junos OS on EX series is prone to a denial of service vulnerability in IPv6 processing. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-8106
It was found that Intel® Ethernet Controller X710 family and Intel® Ethernet Controller XL710 family of products aka Fortville can possibly lock up and not receive any packets after a period of IPv6 fragment flood...
Design/Logic Flaw
A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...
CVE-2017-6603
A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...
CVE-2017-6603
A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...
CVE-2017-6603
Cisco issued advisory Cisco-SA-20170405-ASR describing CVE-2017-6603: A vulnerability in Cisco ASR 903/ASR 920 Series routers with an RSP2 card allows an unauthenticated, adjacent attacker to cause a denial-of-service by mishandling IPv6 packets. The root cause is insufficient IPv6 packet process...