11133 matches found
openstack-neutron: MAC source address spoofing vulnerability
Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...
openstack-neutron: ICMPv6 source address spoofing vulnerability
Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...
[SECURITY] Fedora 23 Update: php-doctrine-orm-2.4.8-1.fc23
Object relational mapper ORM for PHP that sits on top of a powerful datab ase abstraction layer DBAL. One of its' key features is the option to write database queries in a proprietary object oriented SQL dialect called Doctri ne Query Language DQL, inspired by Hibernate's HQL. This provides...
The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco IOS operating system arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure abnormal shutdown by using specially crafted LLDP packets...
TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)
A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...
gimp: arbitrary code execution
Multiple Use-After-Free when parsing XCF channel and layer properties...
The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco IOS operating system arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure abnormal shutdown by using specially crafted LLDP packets...
The vulnerability of the PostgreSQL database management system allows a hacker to trigger a service failure.
The vulnerability of the PostgreSQL database management system is related to a memory reclamation error. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by terminating the SSL session at a certain time...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...
The vulnerability of Cisco IPS software allows a malicious actor to trigger a service failure.
The vulnerability in the dtls1getmessagefragment function in d1both.c of OpenSSL allows malicious actors to induce a service failure recursion and abnormal client termination by using the DTLS hello message in an invalid manner...
The vulnerability of the Internet Explorer browser allows a malicious attacker to compromise the confidentiality and integrity of protected information.
A vulnerability that allows bypassing security mechanisms exists in Internet Explorer and is related to the improper implementation of requirements for high-security SSL certificates, particularly regarding the prohibition on using group certificates. Exploiting this vulnerability enables a...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality of protected information.
The vulnerability exists in OpenSSL due to the incorrect use of the “no-ssl3” option. Exploiting this vulnerability allows malicious actors to circumvent access restrictions by using SSL 3.0 negotiation. This vulnerability is related to the s23clnt.c and s23srvr.c files...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability in d1both.c, within the implementation of DTLS for OpenSSL, allows malicious actors operating remotely to trigger a service failure excessive memory consumption by using specially crafted DTLS negotiation messages that cause memory allocation for large values...
The vulnerability of the Cisco Unified Communications Manager software allows a malicious actor to execute arbitrary code.
The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to an improper check of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure buffer overflow an...
The vulnerability of Trillian software allows a malicious attacker to compromise the confidentiality and integrity of protected information.
The vulnerability exists in Cerulean Studios Trillian due to the lack of verification of SSL certificates during MSN authentication. Exploiting this vulnerability allows malicious actors operating remotely to obtain MSN credentials by using a “man-in-the-middle” attack and replacing the SSL...
The vulnerability of Cisco IPS software allows a malicious actor to intercept sessions.
The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...
The vulnerability of the Cisco Unified Communications Manager software allows a malicious actor to intercept sessions.
The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...
Vulnerability of Cisco ACE software, which allows a malicious actor to intercept sessions
The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality of protected information.
The vulnerability exists in the SSL protocol for OpenSSL due to the use of non-deterministic padding for CBC encryption block chaining of the encryption text. Exploiting this vulnerability allows a malicious actor to obtain unencrypted data by using a padding prediction attack, known as POODLE...
[SECURITY] Fedora 24 Update: gimp-2.8.16-2.fc24
GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and filters you would exp ect to find in similar commercial offerings, and some interesting extras ...