11388 matches found
USN-2587-1: Linux kernel (Trusty HWE) vulnerabilities
A stack overflow was discovered in the the microcode loader for the intel x86 platform. A local attacker could exploit this flaw to cause a denial of service kernel crash or to potentially execute code with kernel privileges. CVE-2015-2666 It was discovered that the Linux kernel's IPv6 networking...
USN-2586-1: Linux kernel (OMAP4) vulnerability
It was discovered that the Linux kernel's IPv6 networking stack has a flaw that allows using route advertisement RA messages to set the 'hoplimit' to values that are too low. An unprivileged attacker on a local network could exploit this flaw to cause a denial of service IPv6 messages dropped...
USN-2585-1: Linux kernel vulnerability
It was discovered that the Linux kernel's IPv6 networking stack has a flaw that allows using route advertisement RA messages to set the 'hoplimit' to values that are too low. An unprivileged attacker on a local network could exploit this flaw to cause a denial of service IPv6 messages dropped...
Cisco StarOS for Cisco ASR 5000 Series HAMGR Service Proxy Mobile IPv6 Processing Denial of Service Vulnerability
A vulnerability in proxy mobile PM IPv6 processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the hamgr service on the affected device. The vulnerability is due to improper processing of malformed IPv6 PM packets. An...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the iptables-ipv6-1.2.4 package of the Red Hat Linux operating system. Exploitation of these vulnerabilities may lead to a compromise of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The iptables-ipv6-1.2.5 package from the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
DSA-3237-1 linux - security update
Bulletin has no description...
ZYXEL P-660HN-T1H_IPv6 Remote Configuration Editor/Web Server Denial of Service Vulnerability
ZYXEL P-660HN-T1HIPv6 is a wireless router device. A denial of service vulnerability exists in ZYXEL P-660HN-T1HIPv6. Since ZYXEL Embedded fails to properly check cookies and credentials in the POST method, an attacker can change the settings and methods after viewing the page; launching a denial...
Dropbox: SSRF vulnerablity in app webhooks
Server Side Request Forgery SSRF is a vulnerabilty which allows an attacker to make web requests from the context of the server host machine to arbitrary URL's. This vulnerability can allow the attacker to access resources internal to the network, which would otherwise be inaccessible. This...
IPv6 toolkit
A security assessment and troubleshooting tool for the IPv6 protocols The SI6 Networksā IPv6 toolkit is a set of IPv6 security/trouble-shoting tools, that can send arbitrary IPv6-based packets. IPv6 toolkit: List of Tools addr6: An IPv6 address analysis and manipulation tool. flow6: A tool to...
CVE-2015-1104
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet had a local origin, which allows remote attackers to bypass an intended network-filtering protection mechanism via a crafted packet...
Design/Logic Flaw
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet had a local origin, which allows remote attackers to bypass an intended network-filtering protection mechanism via a crafted packet...
CVE-2015-1104
The CVE-2015-1104 entry affects Appleās kernel components in iOS (before 8.3), OS X (before 10.10.3), and Apple TV (before 7.2). The issue is an IPv6 handling flaw where the kernel does not reliably determine whether an IPv6 packet has a local origin, enabling a remote attacker to bypass a networ...
CVE-2015-1104
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet had a local origin, which allows remote attackers to bypass an intended network-filtering protection mechanism via a crafted packet...
Apple TV < 7.2 Multiple Vulnerabilities
According to its banner, the remote Apple TV device is a version prior to 7.2. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit due to improperly validated user-supplied input. A remote attacker, using a specially crafted...
SOL16393 - NTP vulnerability CVE-2014-9751
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
FreeBSD IPv6 DoS
It's possible to set low current hope limit via Neighbor Discover Protocol...
FreeBSD Security Advisory FreeBSD-SA-15:09.ipv6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:09.ipv6 Security Advisory The FreeBSD Project Topic: Denial of Service with IPv6 Router Advertisements Category: core Module: ipv6 Announced: 2015-04-07...
FreeBSD-SA-15:09.ipv6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:09.ipv6 Security Advisory The FreeBSD Project Topic: Denial of Service with IPv6 Router Advertisements Category: core Module: ipv6 Announced: 2015-04-07...
FreeBSD -- Denial of Service with IPv6 Router Advertisements
Problem Description: The Neighbor Discover Protocol allows a local router to advertise a suggested Current Hop Limit value of a link, which will replace Current Hop Limit on an interface connected to the link on the FreeBSD system. Impact: When the Current Hop Limit similar to IPv4's TTL is small...