Cisco IOS XR Software IPv6 Packet Handling Denial of Service Vulnerability (cisco-sa-20140611-ipv6)

Cisco IOS XR is prone to a remote denial of service DoS vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

IPv6 DoS

Forget ICMPv6 PTB can break communication between two hosts...

DoS attacks (ICMPv6-based) resulting from IPv6 EH drops

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, Ten days ago or so we published this I-D: http://www.ietf.org/internet-drafts/draft-gont-v6ops-ipv6-ehs-in-real-world-00.txt Section 5.2 of the I-D discusses a possible attack vector based on a combination of "forged" ICMPv6 PTB messages and IP...

[SECURITY] Fedora 19 Update: libndp-1.4-1.fc19

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages...

[SECURITY] Fedora 20 Update: libndp-1.4-1.fc20

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages...

IPv6 DNS Guessing Notes

A hostname with an IPv6 address is stored as a AAAA resource record in DNS see AAAA record. There are many DNS hostname bruteforcing tools, personally I like Fierce. Suppose we have already run our hostname bruteforcing tool against a target domain e.g. facebook.com. Below we use dig to do a AAAA...

IPv6 DNS Guessing Notes

A hostname with an IPv6 address is stored as a AAAA resource record in DNS see AAAA record. There are many DNS hostname bruteforcing tools, personally I like Fierce. Suppose we have already run our hostname bruteforcing tool against a target domain e.g. facebook.com. Below we use dig to do a AAAA...

SuSE 11.3 Security Update : Python (SAT Patch Number 9581)

This update for Python provides fixes for the following issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters. CVE-2014-4650 - The 'urlparse' module has been updated to correctly parse IPv6 addresses. bnc872848 - Correctly enable IPv6 support. %NASLMINLEV...

DEBIAN-CVE-2014-3554

Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitrary code via a crafted DNS Search List DNSSL in an IPv6 router advertisement...

CVE-2014-3554

Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitrary code via a crafted DNS Search List DNSSL in an IPv6 router advertisement...

CVE-2014-3554

Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitrary code via a crafted DNS Search List DNSSL in an IPv6 router advertisement...

Buffer overflow

Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitrary code via a crafted DNS Search List DNSSL in an IPv6 router advertisement...

CVE-2014-3554

The CVE-2014-3554 vulnerability affects the libndp library (ndp_msg_opt_dnssl_domain) and is triggered by a crafted DNS Search List (DNSSL) in an IPv6 router advertisement. Exploitation allows a remote attacker to cause a denial of service (crash) and, potentially, execute arbitrary code. This ri...

CVE-2014-3554

Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitrary code via a crafted DNS Search List DNSSL in an IPv6 router advertisement...

CVE-2014-3554

Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitrary code via a crafted DNS Search List DNSSL in an IPv6 router advertisement...

Cisco IOS XR Typhoon-based Line Cards and Network Processor (NP) Chip DoS

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related to Netflow and handling malformed IPv4/IPv6 packets. Note this issue only affects Cisco ASR 9000 series devices using Typhoon-based line cards and Netflow...

CentOS Update for kernel CESA-2014:0926 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Solaris Critical Patch Update : apr2013_SRU3

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem/NFS. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allow...

kernel security update

CentOS Errata and Security Advisory CESA-2014:0926 Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring Syst...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20140723)

A NULL pointer dereference flaw was found in the rdsiwladdrcheck function in the Linux kernel's implementation of Reliable Datagram Sockets RDS. A local, unprivileged user could use this flaw to crash the system. CVE-2014-2678, Moderate - It was found that the Xen hypervisor implementation did...