CVE-2019-0005

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...

CVE-2019-0003

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcpcollapseofoqueue and tcppruneofoqueue functions by...

Denial Of Service (DoS)

Linux kernel-rt is vulnerable to denial of service. An integer overflow flaw was found in the way the Linux kernel's netfilter connection tracking implementation loaded extensions. An attacker on a local network could potentially send a sequence of specially crafted packets that would initiate th...

Denial Of Service

The virtio-win package is susceptible to denial of serviceDoS. The attack exists because it does not properly escape the length of the incoming IP packets, allowing the attacker to send malicious IP packet to the guest to crash that guest...

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS. A flaw in OpenSSL allows attackers to a double free to occur through DTLS packets...

Denial Of Service

ibacm is vulnerable to a denial of service. The failure to properly managing reference counts for multicast connections opens up the loophole for attacker to inject malicious multicast packets to crash the application...

Denial Of Service (DoS)

krb5 is vulnerable to denial of service DoS attacks. The vulnerability exists as schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU and...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS attacks. The vulnerability exists as Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...

The vulnerability of the CAPWAP Discovery Request analysis procedure implemented in the Cisco Wireless LAN Controller allows a attacker to cause a service failure.

The vulnerability of the CAPWAP request analysis process, where the Cisco Wireless LAN Controller is involved, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by reloading the targeted device with...

Cisco ASR 900 Series ASR Denial of Service Vulnerability

Cisco 900 Series Aggregation Services Router ASR Software is a set of operating systems from Cisco that run in 900 Series router devices. A denial of service vulnerability exists in Cisco 900 Series ASR Software, which arises from the program's failure to adequately handle incoming broadcast...

Design/Logic Flaw

A vulnerability in Cisco 900 Series Aggregation Services Router ASR software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the...

CVE-2018-15464 Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability

A vulnerability in Cisco 900 Series Aggregation Services Router ASR software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the...

CVE-2018-15464 Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability

A vulnerability in Cisco 900 Series Aggregation Services Router ASR software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the...

The vulnerability of the Windows operating system, related to errors in processing fragmented IP packets by the stack, allows a hacker to disclose sensitive information that is protected.

The vulnerability of the Windows operating system is related to errors in processing fragmented IP packets. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using specially crafted fragmented IP packets...

Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability

A vulnerability in Cisco 900 Series Aggregation Services Router ASR software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the...

Rockwell Automation Allen Bradley Micrologix 1400 Series Device Power Cycle Denial of Service (CVE-2017-12088; CVE-2017-12089; CVE-2017-12090; CVE-2017-12092; CVE-2017-12093)

A denial of service vulnerability exists in Rockwell Automation Allen Bradley Micrologix 1400 Series. A remote, unauthenticated attacker can exploit the vulnerability by sending crafted packets to the target system...

ReSIProcate Heap Buffer Overflow (CVE-2018-12584)

A heap buffer overflow vulnerability exists in the ReSIProcate. A remote, unauthenticated attackers could exploit this vulnerability by sending specially crafted SIP packets to the target server. Successful exploitation would result in arbitrary code execution...

FreeBSD Buffer Overflow Vulnerability (CNVD-2019-00788)

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A buffer overflow vulnerability exists in bootpd in FreeBSD, which stems from the program's...

SUSE SLES15 Security Update : squid (SUSE-SU-2018:3786-1)

This update for squid fixes the following issues : Security issues fixed : CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: Create runtime...