224 matches found
EDE: Privilege escalation
Background A package that simplifies the task of creating, building, and debugging large programs with Emacs. It provides some of the features of an IDE, or Integrated Development Environment, in Emacs. Description An untrusted search path vulnerability was discovered in EDE. Impact A local...
CVE-2017-12236
A vulnerability in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier EID to a Routing Locator RLO...
CVE-2017-12236
A vulnerability in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier EID to a Routing Locator RLO...
Authentication flaw
A vulnerability in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier EID to a Routing Locator RLO...
CVE-2017-12236
A vulnerability in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier EID to a Routing Locator RLO...
CVE-2017-12236
Cisco IOS XE LISP Authentication Bypass (CVE-2017-12236) affects IOS XE 3.2–16.5 when acting as an IPv4/IPv6 map server. A logic regression allows an unauthenticated attacker to bypass EID→RLOC registration checks by sending crafted map-registration requests, potentially injecting invalid EID map...
Cisco IOS XE Software Locator/ID Separation Protocol Authentication Bypass Vulnerability
A vulnerability in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE Software could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier EID to a Routing Locator RLOC in the...
UBUNTU-CVE-2017-14482
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...
[slackware-security] emacs
New emacs packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/emacs-25.3-i586-1slack14.2.txz: Upgraded. This update fixes a security vulnerability in Emacs. Gnus no...
[SECURITY] Fedora 25 Update: xemacs-packages-extra-20170114-1.fc25
XEmacs is a highly customizable open source text editor and application development system. It is protected under the GNU General Public License and related to other versions of Emacs, in particular GNU Emacs. Its emphasis is on modern graphical user interface support and an open software...
Cisco NX-OS Software Locator/ID Separation Protocol Packet Denial of Service Vulnerability (cisco-sa-20160323-lisp)
A vulnerability in the Locator/ID Separation Protocol LISP of Cisco NX-OS Software running on the Cisco Nexus 7000 and Nexus 7700 Series Switches with an M1 Series Gigabit Ethernet Module could allow an unauthenticated, remote attacker to cause a reload of the vulnerable device. Copyright C 2016...
Cisco IOS Software LISP Denial of Service Vulnerability (Cisco-SA-20140514-CVE-2014-3262)
A vulnerability in Locator/ID Separation Protocol LISP control message processing in Cisco IOS Software could allow an unauthenticated, remote attacker to cause a vulnerable device to disable Cisco Express Forwarding and eventually drop traffic passing through. SPDX-FileCopyrightText: 2016...
Cisco IOS Malformed LISP Packet DoS (CSCuu64279)
The version of Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the implementation of the Locator/ID Separation Protocol LISP due to improper input validation when a malformed LISP packet is received. An unauthenticated, remote attacker can explo...
Cisco NX-OS Malformed LISP Packet DoS (CSCuv11993)
The version of Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the implementation of the Locator/ID Separation Protocol LISP due to improper input validation when a malformed LISP packet is received. An unauthenticated, remote attacker can...
CVE-2016-1351
CVE-2016-1351 affects Cisco IOS (15.1/15.2) and NX-OS (4.1–6.2) where the Locator/ID Separation Protocol (LISP) is implemented. The root cause is improper input validation of LISP headers, allowing remote unauthenticated attackers to cause a denial of service (device reload) via a crafted UDP hea...
CVE-2016-1351
The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279...
Cisco IOS and NX-OS Software Locator/ID Separation Protocol Packet Denial of Service Vulnerability
A vulnerability in the Locator/ID Separation Protocol LISP of Cisco IOS Software running on the Cisco Catalyst 6500 and 6800 Series Switches and Cisco NX-OS Software running on the Cisco Nexus 7000 and Nexus 7700 Series Switches with an M1 Series Gigabit Ethernet Module could allow an...
PT-2016-1615 · Cisco · Cisco Ios +2
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 15.1 through 15.2 Cisco NX-OS versions 4.1 through 6.2 Description: The Locator/ID Separation Protocol LISP implementation in Cisco IOS and NX-OS allows remote attackers to cause a denial of service device reload via a...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the common-lisp-controller package of the Debian GNU/Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...