CVE-2019-6811

An Improper Check for Unusual or Exceptional Conditions CWE-754 vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a pow...

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions and Modicon M340 controller all firmware versions, which could cause denial of service when truncated SNMP packets on port 161/UDP are received by...

CVE-2019-9009

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash...

Design/Logic Flaw

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash...

CVE-2019-9009

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash...

USN-4133-1: Wireshark vulnerabilities

It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malformed packets onto the wire or convincing someone to read a malformed packet trace file...

USN-4133-1 Wireshark vulnerabilities

It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malformed packets onto the wire or convincing someone to read a malformed packet trace file...

RHEL 6 : kernel (RHSA-2019:2736)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2736 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Memory corruption due to...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...

The vulnerability of the traffic filtering component of the Cisco SD-WAN programmable network allows a hacker to bypass the filters at the L2 and L4 levels.

The vulnerability of the Cisco SD-WAN’s programmatically defined traffic filtering component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass L2 and L4 filters using a specially crafted TCP packet...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Ubuntu: Security Advisory (USN-4115-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4115-2 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2 regression

USN 4115-1 fixed vulnerabilities in the Linux 4.15 kernel for Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. Unfortunately, as part of the update, a regression was introduced that caused a kernel crash when handling fragmented packets in some situations. This update addresses the issue. We apologize for...

Cisco NX-OS Software Fabric Services over IP Denial of Service Vulnerability (CVE-2019-1962)

A denial of service DoS vulnerability exists in the Cisco Fabric Services component of Cisco NX-OS Software due to to insufficient validation of TCP packets when processed by the Cisco Fabric Services over IP CFSoIP feature. An unauthenticated, remote attacker can exploit this issue, via y sendin...

RHEL 6 : kernel (RHSA-2019:2695)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2695 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: hw: Spectre SWAPGS gadget vulnerability...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2019-6017 · Schneider Electric · Modicon Quantum 140 Noe771X1

Name of the Vulnerable Software and Affected Versions: Modicon Quantum 140 NOE771x1 versions 6.9 and earlier Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions, which could cause denial of service when the module receives an IP fragmented packet with a...

The vulnerability in the virtual remote connection service for microprogramming control devices of the BMC Supermicro family allows a hacker to gain full control over the device.

The vulnerability of the virtual remote connection service for Microprogramming Software Control Devices of Supermicro is due to insufficient security restrictions for critical management functions. Exploiting this vulnerability allows a malicious actor to gain full control over the device by...