PT-2015-5620

Name of the Vulnerable Software and Affected Versions HP Capture and Route Software HPCR versions 1.3 before Patch 7 HP Capture and Route Software HPCR version 1.3 FP1 before Patch 1 HP Capture and Route Software HPCR version 1.4 before Patch 1 Description The issue allows remote authenticated...

By monitoring the TTL response to detection of a remote network topology-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-4/2 0 1 5 4 1 6 1 0 4 9 5 8 9 3 0. png Sometimes, the network administrator can configure an internal network to achieve a single host to other hosts on different levels of communication. A single Internet Protocol IP address may be representative of many on the internal...

HPSBPI03315 rev.2 - HP Capture and Route Software, Remote Information Disclosure

Potential Security Impact Remote information disclosure VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP Capture and Route Software. The vulnerability could result in information disclosure. RESOLUTION Use HPCR 1.4 version 1.4 or later. HP has provided the...

Design/Logic Flaw

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

Cisco ASR1000 Series Routers Incomplete or Glean Adjacencies Denial of Service Vulnerability

A vulnerability in Cisco ASR 1000 Series software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper processing of route adjacencies. An attacker could exploit this vulnerability by sending malicious IP packets to an...

PT-2015-4808

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 3.7.5S on ASR 1000 devices Description The issue is related to improper handling of route adjacencies, which can be exploited by sending crafted IP packets to cause a denial of service device hang. An attacker...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150311)

It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions from user space via the uverbs API. A local user with access to a /dev/infiniband/uverbsX device could use this flaw to crash the system or, potentially, escalate...

CentOS 6 : kernel (CESA-2015:0674)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:0674 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

kernel security and bug fix update

2.6.32-504.3.3 - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 2.6.32-504.3.2 - md dm-thin: fix pooliohints to avoid looking at maxhwsectors Mike Snitzer 1161420 1161421 1142773 1145230 2.6.32-504.3.1 - s390 zcrypt: toleration of new crypto adapter hardware Hendrik...

CVE-2014-3405

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

Design/Logic Flaw

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

CVE-2014-3405

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

CVE-2014-3405

Summary: Cisco IOS XE’s Autonomic Networking Infrastructure (ANI) and Autonomic Control Plane (ACP) run the IPv6 RPL protocol. The vulnerability allows an unauthenticated, adjacent attacker to inject routes via crafted RPL advertisements on the ANI interface, potentially impacting routing in the ...

PT-2014-5294

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an ANI interface. This is due to the IPv6 Routing Protocol for Low-Power and Lossy...

CVE-2014-3405: Undefined Security Weakness

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

[SECURITY] Fedora 21 Update: haproxy-1.5.4-1.fc21

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

kernel security and bug fix update

2.6.32-431.29.2 - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc 1114549 1096351 CVE-2014-3535 2.6.32-431.29.1 - mm hugetlb: ensure hugepage access is denied if hugepages are not supported Gustav...

Multiple Platform IPv6 Address Publication - Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29190/info Multiple operating systems are prone to remote denial-of-service vulnerabilities that occur when affected operating systems are acting as IPv6 routers. Successful exploits allow remote attackers to cause...