19 matches found
CVE-2026-88778
Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a TCP Initial Sequence Number (ISN) prediction flaw. The issue affects appliances with TCP-based virtual servers (such as HTTP, SSL, or TCP) where Enhanced ISN Generation is disabled. This vulnerability allows for predictable sequence n...
Oracle Linux 8 : edk2 (ELSA-2026-36721)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36721 advisory. - Resolves: RHEL-115901 CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap rhel-8.10.z - Resolves: RHEL-60830 CVE-2024-38796 edk2: Integer...
EUVD-2008-6527
Malware in sbrugna...
edk2: Predictable TCP Initial Sequence Numbers
A security flaw has been identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker to potentially disclose sensitive information...
PT-2023-8395
Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number, which can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of...
K3126: Large TCP window sizes may make it easier to predict sequence numbers vulnerability CVE-2004-0230
Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribing to email notifications regarding F5 products. Note : Versions that are not listed in this article have not been evaluated for vulnerability to this securit...
SUSE CVE-1999-0077
Predictable TCP sequence numbers allow spoofing...
CVE-2017-6030
A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...
GE Hydran M2 Guessable TCP Initialization Sequence Vulnerability
The GE Hydran M2 is a fault gas and moisture detection solution. The GE Hydran M2 that includes the 7046 Ethernet option generates guessable TCP initialization sequence numbers, allowing an attacker to predict the correct TCP initialization sequence number, send special messages, and falsify that...
CVE-2014-7284: Exposure of Sensitive Information to an Unauthorized Actor
The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by...
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks...
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks...
CVE-2008-6564: Undefined Security Weakness
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks...
Ubuntu Update for libnet-dns-perl vulnerabilities USN-483-1
Ubuntu Update for Linux kernel vulnerabilities USN-483-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libnet-dns-perl vulnerabilities USN-483-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
PT-2008-4988 · Apple · Iphone +1
Name of the Vulnerable Software and Affected Versions: Apple iPod touch versions 2.0 through 2.0.2 Apple iPhone versions 2.0 through 2.0.2 Description: The issue is related to the Networking subsystem, which uses predictable TCP initial sequence numbers. This allows remote attackers to potentiall...
Ubuntu 6.06 LTS / 6.10 : libnet-dns-perl vulnerabilities (USN-483-1)
Peter Johannes Holzer discovered that the Net::DNS Perl module had predictable sequence numbers. This could allow remote attackers to carry out DNS spoofing, leading to possible man-in-the-middle attacks. CVE-2007-3377 Steffen Ullrich discovered that the Net::DNS Perl module did not correctly...
USN-483-1: libnet-dns-perl vulnerabilities
Peter Johannes Holzer discovered that the Net::DNS Perl module had predictable sequence numbers. This could allow remote attackers to carry out DNS spoofing, leading to possible machine-in-the-middle attacks. CVE-2007-3377 Steffen Ullrich discovered that the Net::DNS Perl module did not correctly...
CVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...