514 matches found
USN-2108-1: Linux kernel (EC2) vulnerabilities
A flaw was discovered in the Linux kernel's compat ioctls for Adaptec AACRAID scsi raid devices. An unprivileged local user could send administrative commands to these devices potentially compromising the data stored on the device. CVE-2013-6383 mpd reported an information leak in the recvfrom,...
USN-2107-1: Linux kernel vulnerabilities
A flaw was discovered in the Linux kernel's compat ioctls for Adaptec AACRAID scsi raid devices. An unprivileged local user could send administrative commands to these devices potentially compromising the data stored on the device. CVE-2013-6383 mpd reported an information leak in the recvfrom,...
SEIL Series routers vulnerable to buffer overflow
Overview SEIL Series routers contain a buffer overflow vulnerability. The PPP Access Concentrator PPPAC in SEIL Series routers provided by Internet Initiative Japan Inc. contains a buffer overflow vulnerability in processing L2TP messages. Impact An attacker may execute an arbitrary code on the...
USN-1881-1: Linux kernel vulnerabilities
Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local...
kernel: L2TP send buffer allocation size overflows
Multiple integer overflows in the 1 pppol2tpsendmsg function in net/l2tp/l2tpppp.c, and the 2 l2tpipsendmsg function in net/l2tp/l2tpip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service heap memory corruption and pani...
PT-2010-4059 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the L2TP implementation in the Linux kernel, specifically the pppol2tp xmit function in drivers/net/pppol2tp.c. It does not properly validate certain values associated...
Implementations of IPv6 may be vulnerable to denial of service (DoS) attacks
Overview Implementations of Internet Protocol version 6 IPv6 may be vulnerable to denial of service DoS attacks. Implementations of IPv6 contain an issue in the processing of packets related to the Neighbor Discovery Protocol RFC4861, which may lead to a denial of service vulnerablility. For more...
PT-2007-3786 · Cisco · Cisco Asa +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX version 7.2 before 7.228 Description: The issue concerns an unspecified vulnerability that allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling...
CVE-2006-5873
Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...
DEBIAN-CVE-2006-5873
Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...
security flaw
Multiple unknown vulnerabilities in the 1 KINK, 2 L2TP, 3 MGCP, 4 EIGRP, 5 DLSw, 6 MEGACO, 7 LMP, and 8 RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service infinite loop...
DEBIAN-CVE-2003-1029
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...
