Tor: Denial of service

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Tor does not handle data correctly when specifically crafted data is sent, and also fails to properly verify a descriptor provided by a hidden service...

RIPv1 Reflection Amplification DDoS Attacks

A long-deprecated—and aptly named—routing protocol, RIPv1, still has some life to it. Hackers, since the middle of May, have been carrying out reflection- and amplification-style distributed denial of service attacks using home office and small business routers still running on the old protocol...

Bridging OpenVPN

OpenVPN supports two very different means for interconnecting networks: routing and bridging. Routing refers to the interconnection of separate and independent “sub-networks” subnets which have non-overlapping ranges of IP addresses. Upon receiving a packet sent to it, a network “router” examines...

Race condition

Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine PRE module on UBR devices allows remote attackers to cause a denial of service NULL pointer free and module crash by triggering intermittent connectivity with many IPv6 CPE devices, aka Bug ID...

CVE-2015-4203

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine PRE module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service PXF process crash by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396...

Memory corruption

Memory leak in Cisco IOS 12.2 in the Performance Routing Engine PRE module on uBR10000 devices allows remote authenticated users to cause a denial of service memory consumption or PXF process crash by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051...

CVE-2015-4200

Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine PRE module on UBR devices allows remote attackers to cause a denial of service memory consumption by triggering an error during CPE negotiation, aka Bug ID CSCug00885...

CVE-2015-4204

The CVE-2015-4204 issue affects Cisco IOS 12.2 on uBR10000 devices (Performance Routing Engine) where a memory leak in the docsIfMCmtsMib handling via SNMP can be triggered by authenticated users, leading to DoS (memory exhaustion or PXF process crash). Root cause: memory leak when polling specif...

CVE-2015-4204

Memory leak in Cisco IOS 12.2 in the Performance Routing Engine PRE module on uBR10000 devices allows remote authenticated users to cause a denial of service memory consumption or PXF process crash by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051...

Cisco IOS Software UBR Devices IPv6 to IPv4 Subsystem Denial of Service Vulnerability

A vulnerability in the IPv6 to IPv4 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a standby Performance Routing Engine PRE to leak a small portion of memory on a targeted system, resulting in a denial of service DoS condition. The vulnerability is due to...

Cisco IOS Software UBR Devices IPv6 to IPv4 Subsystem Denial of Service Vulnerability

A vulnerability in the IPv6 to IPv4 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a Performance Routing Engine PRE crash on a targeted system, resulting in a denial of service DoS condition. The vulnerability is due to a race condition that may cause a...

Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability

A vulnerability in the IP version 6 IPv6 processing code of Cisco IOS XR Software for Cisco CRS-3 Carrier Routing System could allow an unauthenticated, remote attacker to trigger an ASIC scan of the Network Processor Unit NPU and a reload of the line card processing an IPv6 packet. The...

Cisco IOS XR Denial-of-Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated remote attacker to cause a denial-of-service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. A Cisco Carrier Routing System 3 CRS-3 running a version of Cisco...

Router drive Assembly NetUSB exposure remote overflow vulnerability affects D-Link, NETGEAR, TP-LINK, etc. millions of network-vulnerability warning-the black bar safety net

Well-known router D-Link, NETGEAR, TP-LINK on the important drive components of the NetUSB was traced to the presence of serious remote overflow vulnerability, affecting millions of routing and embedded devices. NetUSB technology by Taiwanese companies profit code, KCodes develop it. myhack58...

Wireshark DEC DNA Routing Protocol Handles Remote Denial of Service Vulnerability

Wireshark is an open source network protocol analysis tool. The setdnetaddress function in the Wireshark DEC DNA routing protocol 'packet-dec-dnart.c' handles data with a pointer error, which allows remote attackers to exploit vulnerabilities to construct malicious messages and trick users into...

[SECURITY] Fedora 20 Update: ax25-tools-0.0.10-0.12.rc2.fc20

ax25-tools is a collection of tools that are used to configure an ax.25 ena bled computer. They will configure interfaces and assign callsigns to ports as w ell as Net/ROM and ROSE configuration. This package only contains the command line programs; the GUI programs are contained in ax25-tools-x...

Tor 'dns.c' Denial of Service Vulnerability

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. A denial of service vulnerability exists in Tor. An attacker can exploit this vulnerability to crash an application and cause a denial of service...

D-Link cloud routing memory vulnerability: hack 1 minute break or leakage of online banking passwords-vulnerability warning-the black bar safety net

D-Link cloud routing memory the vulnerability may leak password Relates to 1 of 7 models; the Friends of the news group in English official website released four of the model number Router the patch, but there is no Chinese version of the Beijing news news recently, the domestic security experts...

DLA-198-1 wireshark - security update

Bulletin has no description...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2563-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2563-1 advisory. Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote...