CVE-2013-3077

CVE-2013-3077 concerns an integer overflow in FreeBSD kernel multicast path (IP_MSFILTER and IPV6_MSFILTER) on versions 8.3–9.2-PRERELEASE, allowing a local user to bypass kernel memory read/write restrictions and gain privileges via many source-filter entries. The vulnerability arises in tempora...

CVE-2013-3077

Removed by vendor...

Debian DSA-2743-1 : kfreebsd-9 - privilege escalation/information leak

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-3077 Clement Lecigne from the Google Security Team reported an integer...

FreeBSD-SA-13:09.ip_multicast

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-13:09.ipmulticast Security Advisory The FreeBSD Project Topic: integer overflow in IPMSFILTER Category: core Module: kernel Announced: 2013-08-22 Credits: Clement...

Design/Logic Flaw

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

CVE-2013-0149

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

CVE-2013-0149

Removed by vendor...

CVE-2013-4129

The bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a certain timer is armed before modifying the timeout value of that timer, which allows local users to cause a denial of service BUG and system crash via vectors involving the shutdown of a KVM virtual...

Design/Logic Flaw

The bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a certain timer is armed before modifying the timeout value of that timer, which allows local users to cause a denial of service BUG and system crash via vectors involving the shutdown of a KVM virtual...

UBUNTU-CVE-2013-4129

The bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a certain timer is armed before modifying the timeout value of that timer, which allows local users to cause a denial of service BUG and system crash via vectors involving the shutdown of a KVM virtual...

PT-2013-4862 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.10.3 Description: The issue is related to the bridge multicast implementation in the Linux kernel, which does not properly check if a certain timer is armed before modifying its timeout value. This can be...

Juniper Junos SRX Series PIM DoS (JSA10573)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability when Protocol-Independent Multicast PIM is enabled. An attacker, using specially crafted PIM packets subject to NAT, can cause the Flow Daemon flowd to crash. Repeated...

Oracle Linux 5 : avahi (ELSA-2010-0528)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0528 advisory. - Fixes CVE-2010-2244 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Juniper Junos GRE DoS (PSN-2013-04-917)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted GRE packets received on a multicast tunnel interface that are allowed to reach the routing engine can cause the kernel to crash. An unauthenticated attacker on the same...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities: Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability Cisco IOS XE Software MVPNv6 Traffic Denial of Service Vulnerability Cisco IOS XE...

CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

Code injection

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

Code injection

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

CVE-2013-1164

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1164 due to improper implementation of the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, enabling remote attackers to trigger a DoS (card reload) via fragmented IPv6 multicast packets. Affected versions include 3.4 before ...