Microsoft Windows IPv6 Router Advertisements Denial of Service (MS14-006; CVE-2014-0254)

A denial of service vulnerability has been reported in Microsoft Windows. The vulnerability is due to a design weakness in the IPv6 stack as it processes router advertisement packets. An attacker can exploit this vulnerability by sending a large number of specially crafted IPv6 packets to the...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores...

CVE-2014-2309

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

Linux Kernel IPv6路由通告报文处理拒绝服务漏洞

CVE ID:CVE-2014-2309 Linux Kernel是一款开源的操作系统。 Linux Kernel在创建路由通告的路由时存在错误，允许攻击者利用漏洞提交恶意报文消耗大量内存资源，造成拒绝服务攻击。 要成功利用漏洞需要内核支持IPv6协议，并启用IPv6临时地址。 0 Linux Kernel 3.10.x Linux Kernel 3.12.x Linux Kernel 3.13.x 厂商补丁： Linux ----- 用户可参考厂商的GIT库以获得补丁修复此漏洞：...

Design/Logic Flaw

The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...

CVE-2014-0705

The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...

CVE-2014-0705

The CVE-2014-0705 issue affects Cisco Wireless LAN Controllers (WLC) where the MLDv2 Snooping feature, when handling malformed IPv6 MLDv2 packets, can trigger a denial of service (device restart). Affected IOS/WLC versions are 7.2, 7.3, 7.4 prior to 7.4.121.0, and 7.5. Cisco released a security a...

openldap security update

2.3.43-27 - fix: CVE-2013-4449 segfault on certain queries with rwm overlay 1064145 2.3.43-26 - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host 812772...

Ubuntu: Security Advisory (USN-2117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-2117-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN21171.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2117-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Ubuntu 13.10 : linux vulnerabilities (USN-2117-1)

Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload UFI in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service panic. CVE-2013-4563 Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker...

Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2113-1)

Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload UFI in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service panic. CVE-2013-4563 Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker...

USN-2113-1: Linux kernel (Saucy HWE) vulnerabilities

Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload UFI in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service panic. CVE-2013-4563 Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker...

CVE-2014-0254

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...

Denial of service

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...

CVE-2014-0254

The CVE-2014-0254 issue affects Microsoft Windows 8, Windows Server 2012, and Windows RT, where the IPv6 TCP/IP stack does not properly validate ICMPv6 Router Advertisement packets, allowing remote denial-of-service that can cause a system hang. Affected component: IPv6 implementation in Windows ...

CVE-2014-0254

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...

Microsoft Windows TCP/IP IPv6路由器广播数据包拒绝服务漏洞（MS14-006）

BUGTRAQ ID: 65409 CVECAN ID: CVE-2014-0254 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内TCP/IP IPv6实现存在拒绝服务漏洞，成功利用后可造成受影响系统停止响应。如果用户发送大量的特制 IPv6数据包到受影响系统，该漏洞可造成拒绝服务。要利用此漏洞，攻击者的系统必须和目标系统属于同一个子网。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT Microsoft Windows 8 厂商补丁： Microsoft ---------...

Microsoft Windows IPv6 Denial of Service Vulnerability (2904659)

This host is missing a important security update according to Microsoft Bulletin MS14-006. OpenVAS Vulnerability Test $Id: secpodms14-006.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IPv6 Denial of Service Vulnerability 2904659 Authors: Veerendra GG Copyright: Copyright C 2014 SecPod,...

kernel security and bug fix update

2.6.32-431.5.1 - net sctp: fix checksum marking for outgoing packets Daniel Borkmann 1046041 1040385 - kernel ptrace: Cleanup useless header Aaron Tomlin 1046043 1036312 - kernel ptrace: kill BKL in ptrace syscall Aaron Tomlin 1046043 1036312 - fs nfs: Prevent a 3-way deadlock between layoutretur...