616 matches found
Security update for the Linux Kernel (important)
The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggeri...
VPN Server Detection via PPTP/L2TP
Binary data 7264.pasl...
Cisco IOS L2TP Parsing DoS (cisco-sa-20170322-l2tp)
According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in its Layer 2 Tunneling Protocol L2TP parsing function due to insufficient validation of L2TP packets. An unauthenticated, remote attacker can exploit this...
Cisco IOS XE L2TP Parsing DoS (cisco-sa-20170322-l2tp)
According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in its Layer 2 Tunneling Protocol L2TP parsing function due to insufficient validation of L2TP packets. An unauthenticated, remote attacker can exploit...
Cisco IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability
A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...
Cisco IOS Software Layer 2 Tunneling Protocol Denial of Service Vulnerability (cisco-sa-20170322-l2tp)
A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...
CVE-2017-3857
A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and Cisco IOS XE 3.1 through 3.18 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation...
CVE-2017-3857
A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and Cisco IOS XE 3.1 through 3.18 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation...
CVE-2017-3857
CVE-2017-3857 is a DoS vulnerability in Cisco IOS (12.0–12.4, 15.0–15.6) and IOS XE (3.1–3.18) caused by improper validation in the Layer 2 Tunneling Protocol (L2TP) parsing function. An unauthenticated, remote attacker can send crafted L2TP packets to trigger a device reload when the L2TP featur...
Cisco IOS and IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability
A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of L2TP packets. An attacker could exploit this...
MikroTik RouterOS 'L2TP' Man-in-the-Middle Attack Vulnerability (Feb 2017)
MikroTik RouterOS is prone to a man in the middle attack vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-10200
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...
Code injection
The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...
CVE-2017-6297
The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...
CVE-2017-6297
The CVE-2017-6297 entry concerns MikroTik RouterOS L2TP Client in versions 6.83.3 and 6.37.4. The vulnerability arises because IPsec encryption is not enabled after a reboot, enabling man-in-the-middle attackers to view unencrypted data and potentially access networks on the L2TP server by monito...
CVE-2017-6297
The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...
High Performance DoS Analyzer: FastNetMon
High Performance DoS Analyzer FastNetMon – A high performance DoS/DDoS load analyzer built on top of multiple packet capture engines NetFlow, IPFIX, sFLOW, SnabbSwitch, netmap, PFRING, PCAP. What can we do? We can detect hosts in our networks sending or receiving large volumes of...
The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.
A vulnerability exists in the l2tpip6getname function in the Linux kernel’s net/l2tp/l2tpip6.c file, due to incorrect return values under certain circumstances. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory, using a specially...
Fedora Update for NetworkManager-l2tp FEDORA-2016-7
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
