PT-2016-5012

Name of the Vulnerable Software and Affected Versions libdwarf version 20151114 Description The issue allows attackers to cause a denial of service, specifically an out-of-bounds read, by utilizing a crafted ELF object file. This is related to the dwarf read cie fde prefix function in dwarf...

bind: specific APL data could trigger an INSIST in apl_42.c

A denial of service flaw was found in the way BIND processed certain malformed Address Prefix List APL records. A remote, authenticated attacker could use this flaw to cause named to crash...

bind: specific APL data could trigger an INSIST in apl_42.c

A denial of service flaw was found in the way BIND processed certain malformed Address Prefix List APL records. A remote, authenticated attacker could use this flaw to cause named to crash...

ISC BIND Denial of Service Vulnerability

ISC BIND is an open source BIND program. A security vulnerability exists in ISC BIND that allows remote attackers to exploit a vulnerability to submit Address Prefix List APL data to trigger a buffer overflow and crash the service...

DEBIAN-CVE-2015-8704

apl42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service INSIST assertion failure and daemon exit via a malformed Address Prefix List APL record...

CVE-2015-8704: Improper Input Validation

apl42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service INSIST assertion failure and daemon exit via a malformed Address Prefix List APL record...

CVE-2015-8704

apl42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service INSIST assertion failure and daemon exit via a malformed Address Prefix List APL record...

UBUNTU-CVE-2015-8704

apl42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service INSIST assertion failure and daemon exit via a malformed Address Prefix List APL record...

PT-2016-1132

Name of the Vulnerable Software and Affected Versions ISC BIND 9.x versions 9.9.8-P3 and earlier, 9.9.x, and 9.10.x versions prior to 9.10.3-P3 Description The issue is caused by insufficient input validation, allowing a remote authenticated attacker to cause a denial of service via a malformed...

[SECURITY] Fedora 23 Update: kea-1.0.0-1.fc23

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

[SECURITY] Fedora 22 Update: kea-0.9.2-2.fc22

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

IBM Cognos Business Intelligence Tivoli Common Reporting Security Bypass Vulnerability

IBM Cognos Business Intelligence BI and IBM Tivoli Common Reporting TCR are both products of IBM Corporation, U.S.A. BI is a set of business intelligence software. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such...

Wireshark DIAMETER parser denial of service vulnerability

Wireshark is the most popular network protocol parser. In Wireshark versions 2.0.x before 2.0.1 and 1.12.x before 1.12.9, the function dissectdiameterbaseframedipv6prefix in epan/dissectors/packet-diameter.c in the DIAMETER parser does not properly validate the IPv6 prefix length. prefix does not...

DEBIAN-CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

UBUNTU-CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

CVE-2015-8725

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

CVE-2015-8725: Improper Input Validation

The dissectdiameterbaseframedipv6prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service stack-based buffer overflow...

PT-2016-3973

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.8 Wireshark versions 2.0.x through 2.0.0 Description The issue is related to the dissect diameter base framed ipv6 prefix function in the DIAMETER dissector, which does not validate the IPv6 prefix length...

MediaWiki Information Disclosure Vulnerability (CNVD-2015-08498)

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki fails to properly handle the '@' prefix, allowing remote attackers to upload files from the server side and obtain sensitive...