633 matches found
Cisco IOS XR MPLS LDP Packet Processing Denial of Service Vulnerability
A vulnerability in the Multiprotocol Label Switching MPLS Label Distribution Protocol LDP packet processing feature of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the MPLS LDP process on the affected device. The vulnerability is due to improper processing of...
Cisco IOS XR IPv6 Packet Processing Denial of Service Vulnerability
A vulnerability in IP version 6 IPv6 processing in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a reload of the ipv6io service. The vulnerability is due to improper processing of a malformed IPv6 packet by a device configured to process such packets. An attacker...
Fedora 22 : armacycles-ad-0.2.8.3.3-1.fc22 (2015-9528)
Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...
Cisco IOS XR
Crash on IPv6 packet processing...
Cisco StarOS for Cisco ASR 5000 Series HTTP Packet Processing Denial of Service Vulnerability
A vulnerability in HTTP packet processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the session manager service on the affected device. The vulnerability is due to improper processing of malformed HTTP packets. An...
Network Time Protocol Daemon Symmetric Mode Packet Processing Denial of Service Vulnerability
A vulnerability in ntpd could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to improper processing of Network Time Protocol NTP packets when handling symmetric key authentication failures. An attacker could...
Cisco IOS XR DoS
DoS on IPv6 packets processing...
SEIL Series routers vulnerable to denial-of-service (DoS)
Overview The PPP Access Concentrator PPPAC in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service DoS vulnerability due to a flaw in processing SSTP packets. Impact Receiving a specially crafted SSTP packet may result in the device becoming unresponsive...
MS15-002: Vulnerability in Windows Telnet Service Could Allow Remote Code Execution (3020393)
The remote Windows host is affected by a remote code execution vulnerability due to improper processing of packets by the Telnet service. A remote attacker can exploit this issue by sending specially crafted packets to a Windows server. C Tenable Network Security, Inc. include"compat.inc"; if...
Debian DSA-3108-1 : ntp - security update
Several vulnerabilities were discovered in the ntp package, an implementation of the Network Time Protocol. - CVE-2014-9293 ntpd generated a weak key for its internal use, with full administrative privileges. Attackers could use this key to reconfigure ntpd or to exploit other vulnerabilities. -...
Snort 3.0 - Network intrusion prevention and detection system (IDS/IPS)
Snort is the most powerful IPS in the world, setting the standard for intrusion detection. So when we started thinking about what the next generation of IPS looked like we started from scratch. Features Support multiple packet processing threads Shared configuration and attribute table Use a...
Next Generation Snort IPS: Snort3
The Snort++ project has been hard at work for a while now and we have released the third alpha of the next generation Snort IPS Intrusion Prevention System. This file will show you what Snort++ has to offer and guide you through the steps from download to demo. If you are unfamiliar with Snort yo...
MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution (2992611) (uncredentialed check)
Binary data ms14-066.nbin...
OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)
It was discovered that the DatagramSocket implementation in OpenJDK failed to perform source address checks for packets received on a connected socket. A remote attacker could use this flaw to have their packets processed as if they were received from the expected source...
OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)
It was discovered that the DatagramSocket implementation in OpenJDK failed to perform source address checks for packets received on a connected socket. A remote attacker could use this flaw to have their packets processed as if they were received from the expected source...
shim: out-of-bounds memory read flaw in DHCPv6 packet processing
An out-of-bounds memory read flaw was found in the way shim parsed certain IPv6 packets. A specially crafted DHCPv6 packet could possibly cause shim to crash, preventing the system from booting if IPv6 booting was enabled...
Cisco TelePresence VCS / Expressway Series < 8.2 Multiple DoS Vulnerabilities
According to the self-reported version, returned by a standard SNMP request, the version of the Cisco TelePresence VCS or Expressway Series device prior to 8.2. It is, therefore, potentially affected by multiple denial of service vulnerabilities : - A flaw exists in packet processing when...
Android Bluetooth Pairing Packet Processing Vulnerability（by wangzq from NCNIPC）
I. Summary Bluetooth Pairing Packet is written to a NFC tag, which can be touched by a NFC mobile phone for bluetooth pairing. A logic flaw has been found in some versions of Andorid mobile phone. The flaw can cause NFC phones'bluetooth turned on, regardless of whether the pairing succeeds or not...
openssl: DTLS packet processing double free
A flaw was discovered in the way OpenSSL handled DTLS packets. A remote attacker could use this flaw to cause a DTLS server or client using OpenSSL to crash or use excessive amounts of memory...
openssl: DTLS packet processing double free
A flaw was discovered in the way OpenSSL handled DTLS packets. A remote attacker could use this flaw to cause a DTLS server or client using OpenSSL to crash or use excessive amounts of memory...