Moderate: Red Hat Security Advisory: ntp security, bug fix, and enhancement update

Updated ntp packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Ubuntu 14.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-2808-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2808-1 advisory. It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform...

USN-2808-1: wpa_supplicant and hostapd vulnerabilities

It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform broadcast/multicast packet injections, or cause a denial of service. CVE-2015-5310 It was discovered that wpasupplicant and hostapd incorrectly...

UBUNTU-CVE-2015-5310

The WNM Sleep Mode code in wpasupplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection MFP was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service ignored packets via a...

CVE-2011-0709

The brmdbipget function in net/bridge/brmulticast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service NULL pointer dereference and system crash via an IGMP packet, related to lack of a multicast table...

knx-gateway-discover NSE Script

Discovers KNX gateways by sending a KNX Search Request to the multicast address 224.0.23.12 including a UDP payload with destination port 3671. KNX gateways will respond with a KNX Search Response including various information about the gateway, such as KNX address and supported services. Further...

OpenStack Designate 'mDNS' Service Denial of Service Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA and Rackspace, Inc. in the United States. A denial of service vulnerability exists in OpenStack Designate 'mDNS' Service, which allows remote attackers to exploit this vulnerabilit...

SOL16844 - Multicast DNS vulnerability VU#550620

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

Cisco ASA PIM Remote Denial of Service Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability in the Protocol Independent Multicast application included with the Cisco Adaptive Security Appliance allows a remote attacker to exploit the...

CVE-2015-0742

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

Design/Logic Flaw

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

CVE-2015-0742

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

CVE-2015-0742

The CVE describes a DoS in Cisco ASA’s Protocol Independent Multicast (PIM) forwarding due to improper multicast-forwarding registration. Affected Cisco ASA Software versions include 9.2(0.0)–9.4(0.115) and 100.13(0.21)–100.14(1.1). The issue (Bug CSCus74398) allows remote attackers to disrupt mu...

Cisco Adaptive Security Appliance Protocol Independent Multicast Registration Vulnerability

A vulnerability in the Protocol Independent Multicast PIM application of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to disrupt the multicast traffic forwarding on the affected device via a denial-of-service DoS attack. The vulnerability is due to an...

PT-2015-1381 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.20.0 through 9.40.115 Cisco Adaptive Security Appliance ASA Software versions 100.130.21 through 100.141.1 Description: The issue is related to the Protocol Independent Multicast PIM...

The vulnerability of Cisco’s operating system IOS, which allows a remote attacker to trigger a service failure

The vulnerability of the Discovery Gateway service allows a malicious actor to trigger a service failure device reboot by sending specially crafted mDNS UDP packets over IPv4 or IPv6...

RHEL 6 : kernel (RHSA-2015:0782)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Synology DiskStation Manager Multicast DNS (mDNS) responder denial of service vulnerability

Synology DiskStation Manager is the first NAS operating system to provide a user interface for network multitasking. A security vulnerability exists in the Synology DiskStation Manager Multicast DNS mDNS responder, which can be exploited by remote attackers to gain access to sensitive information...

IBM Security Access Manager for Web Multicast DNS Information Disclosure Vulnerability

IBM Security Access Manager ISAM for Web formerly known as IBM Tivoli Access Manager for e-business is a suite of IBM products for user authentication, authorization, and Web single sign-on solutions that provide user access management and Web application protection Functions. An information...