Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability

A vulnerability in the packet reassembly subsystem of Cisco IOS-XE could allow an unauthenticated, remote attacker to consume CPU resources which may lead to a denial of service DoS condition. The vulnerability is due to an error message that is triggered to the console and the syslog when a...

Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: The NCP dissector could crash CVE-2016-4076. TShark could crash due to a packet reassembly bug CVE-2016-4077. The IEEE 802.11 dissector could crash CVE-2016-4078. The PKTC dissector could crash CVE-2016-4079. The PKTC dissector could crash...

Xplico v1.1.1 - Open Source Network Forensic Analysis Tool (NFAT)

The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer. Xplico is ...

Juniper Networks Junos OS TCP Reassembly DoS Vulnerability

Junos OS is prone to a TCP reassembly DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

wireshark: Reassembly memory leak (wnpa-sec-2015-16)

A flaw was found in the way packet reassembly code of wireshark would parse a packet which could leak memory. An attacker could use this flaw to crash wireshark by sending a specially crafted packet onto the wire or by convincing wireshark user to read malformed packet trace file...

UBUNTU-CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

PT-2015-6848

Name of the Vulnerable Software and Affected Versions hostapd versions 2.0 through 2.5 Description The issue is related to the eap pwd process function in eap server/eap server pwd.c, which does not validate the size of the reassembly buffer for the final fragment in EAP-pwd messages. This can be...

Juniper Junos Fragmented TCP Packet Sequence Handling DoS (JSA10696)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper TCP packet reassembly. An unauthenticated, remote attacker can exploit this, via a specially crafted sequence of fragmented packets, to consume all...

Design/Logic Flaw

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R5, and 14.2 before 14.2R1 do not properly handle TCP packet reassembly, which allows remote...

CVE-2014-6449

CVE-2014-6449 affects Juniper Networks Junos OS (multiple branches/versions) where TCP packet reassembly is mishandled. A remote attacker can cause a denial of service by sending a crafted sequence of packets destined to the device, leading to buffer consumption. Concretely, the vulnerability tar...

CVE-2014-6449: Undefined Security Weakness

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R5, and 14.2 before 14.2R1 do not properly handle TCP packet reassembly, which allows remote...

PT-2015-3856

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X44-D50 Juniper Junos OS version 12.1X46 prior to 12.1X46-D35 Juniper Junos OS version 12.1X47 prior to 12.1X47-D25 Juniper Junos OS version 12.3 prior to 12.3R10 Juniper Junos OS version 12.3X48 prior to...

CVE-2015-6274: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IPv4 implementation on Cisco ASR 1000 devices with software 15.53S allows remote attackers to cause a denial of service ESP QFP CPU consumption by triggering packet fragmentation and reassembly, aka Bug ID CSCuv71273...

PT-2015-7145

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 devices with software version 15.53S Description The issue allows remote attackers to cause a denial of service by triggering packet fragmentation and reassembly, resulting in ESP QFP CPU consumption. Recommendations For Cisco A...

CVE-2015-6273: Undefined Security Weakness

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

Cisco IOS XE Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the packet reassembly subsystem of Cisco IOS XE 3.13S and earlier versions, which originates from a program that sends an ATTN-3-SYNCTIMEOUT error messag...

Design/Logic Flaw

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...

CVE-2015-4293

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...

CVE-2015-4293

Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability (CVE-2015-4293) affects Cisco IOS-XE 3.13S and earlier, where the packet reassembly subsystem can be triggered by a stream of fragmented IPv4/IPv6 packets. The root cause is an ATTN-3-SYNC_TIMEOUT error message emitted during faile...

CVE-2015-4293: Undefined Security Weakness

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...