PT-2014-1299

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.8 Description The issue is related to the STUN protocol implementation in libpurple. It allows remote STUN servers to cause a denial of service by triggering a socket read error, leading to an out-of-bounds write...

wireshark: crash in STUN dissector (wnpa-sec-2012-21)

The dissectstunmessage function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial ...

CVE-2013-1210

Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...

CVE-2013-1211

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...

Code injection

Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...

CVE-2013-1210

Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...

CVE-2013-1210

Cisco Nexus 1000V Nexus 1000V VEM kernel driver for VMware ESXi is affected by CVE-2013-1210 due to an out-of-bounds array access when STUN debugging is enabled. The issue can be exploited remotely by sending crafted STUN packets to the VEM, potentially crashing the ESXi hypervisor and causing a ...

CVE-2013-1211

CVE-2013-1211 affects Cisco NX-OS on the Nexus 1000V, where insufficient authentication between Virtual Ethernet Module (VEM) and Virtual Supervisor Module (VSM) enables a remote attacker to obtain VEM access. The issue can be exploited via (1) spoofed STUN packets or (2) a misconfigured/rogue VM...

Cisco Nexus 1000V ESXi Hypervisor Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 1000V Virtual Ethernet Module VEM kernel driver for VMware ESXi could allow an unauthenticated, remote attacker to cause the ESXi hypervisor to crash, resulting in a purple screen of death PSOD. The vulnerability is due to insufficient validation of STUN protoco...

Cisco Nexus 1000V Insufficient VSM/VEM Authentication Vulnerability

A vulnerability in the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to obtain control over a Virtual Ethernet Module VEM and associated port groups. The vulnerability is due to insufficient authentication between a VEM and a Virtual Supervisor Module VSM. An attacker could...

CVE-2013-1211: Improper Authentication

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...

PT-2013-2974

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on the Nexus 1000V affected versions not specified Description The issue is related to insufficient authentication between a Virtual Ethernet Module VEM and a Virtual Supervisor Module VSM in Cisco Nexus 1000V. This allows remote...

PT-2013-2973

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V Virtual Ethernet Module VEM kernel driver for VMware ESXi affected versions not specified Description A denial of service issue exists due to insufficient validation of STUN protocol packets, resulting in an out of bound arra...

Tips for DAG Exchange Backup and Replication in vSphere

vSphere Snapshot Improvements This article was initially written when vSphere 5 snapshot operations were known and expected to cause small amounts of I/O stun to a VM's guest OS. Improvements in the latter vSphere versions, including significant changes to snapshot operation methodology in vSpher...

SuSE 11.2 Security Update : wireshark (SAT Patch Number 6760)

wireshark was updated to 1.4.15 to fix multiple security issues. Issues fixed : - fix bnc776038CVE-2012-4285 / CVE-2012-4288 / CVE-2012-4289 / CVE-2012-4296 / CVE-2012-4291 / CVE-2012-4292 / CVE-2012-4293 / CVE-2012-4290, bnc772738 CVE-2012-4048 / CVE-2012-4049fixed upstream - Security fixes : -...

Mandriva Linux Security Advisory : wireshark (MDVSA-2012:134)

Multiple vulnerabilities was found and corrected in Wireshark : The DCP ETSI dissector could trigger a zero division CVE-2012-4285. The MongoDB dissector could go into a large loop CVE-2012-4287. The XTP dissector could go into an infinite loop CVE-2012-4288. The AFP dissector could go into a lar...

Fedora 16 : wireshark-1.6.10-1.fc16 (2012-12085)

Upgrade to wireshark 1.6.10 The following vulnerabilities have been fixed. wnpa-sec-2012-13: The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-15: The XTP dissector could go into an infinite loop. wnpa-sec-2012-17: The AFP dissector could go into a large loop. wnpa-sec-2012-18:...

Fedora 17 : wireshark-1.6.10-1.fc17 (2012-12091)

Upgrade to wireshark 1.6.10 The following vulnerabilities have been fixed. wnpa-sec-2012-13: The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-15: The XTP dissector could go into an infinite loop. wnpa-sec-2012-17: The AFP dissector could go into a large loop. wnpa-sec-2012-18:...

FreeBSD : Wireshark -- Multiple vulnerabilities (4cdfe875-e8d6-11e1-bea0-002354ed89bc)

Wireshark reports : It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by...

Mandriva Update for wireshark MDVSA-2012:134 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2012:134 wireshark Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...