CVE-2019-2317

The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2019-2317

CVE-2019-2317 is a vulnerability in Qualcomm Snapdragon components where the secret key used to generate the TCP Initial Sequence Number (ISN) in SYN packets can be brute-forced, enabling prediction of ISNs. Affected products include a wide range of Snapdragon platforms (Auto, Compute, Consumer I...

New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...

aSYNcrone - A SYN Flood DDoS Tool

aSYNcrone is a C language based, mulltifunction SYN Flood DDoS Weapon. Disable the destination system by sending a SYN packet intensively to the destination. aSYNcrone's POWER!!! USAGE git clone https://github.com/fatih4842/aSYNcrone.git cd aSYNcrone gcc aSYNcrone.c -o aSYNcrone -lpthread...

CVE-2019-15134

RIOT through 2019.07 contains a memory leak in the TCP implementation gnrctcp, allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to receive in sys/net/gnrc/transportlayer/tcp/gnrctcpeventloop.c...

CVE-2019-15134

RIOT through 2019.07 contains a memory leak in the TCP implementation gnrctcp, allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to receive in sys/net/gnrc/transportlayer/tcp/gnrctcpeventloop.c...

CVE-2019-11890

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

Design/Logic Flaw

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

CVE-2019-11890

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

5 Years of Fighting DDoS with the Power of Akamai

Additional analysis and research provided by Principal Architect, Tom Emmons Earlier this year, Akamai celebrated the fifth anniversary of the Prolexic acquisition. The merger was officially completed in February of 2014, and a lot has happened since then. In this post, we want to spend a moment...

Preparing the Internet for the Next Mega DDoS Attack

When you think of a distributed denial-of-service DDoS attack at this point in the age of the internet, you might be thinking they’re old news. But when a multi-million-dollar business can be easily taken offline by an unskilled adversary and a $5 rent-a-DDoS service, I would argue that the issue...

Linux: TCP SYN Cookies

Normally, a client sends a SYN to the server which responds and hold state information in the TCP stack. In a SYN flood, the generated SYN packets consume all available TCP memory leading the server to deny service. The TCP SYN cookie is a mechanism to resist such SYN flood attacks. This script...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

Design/Logic Flaw

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

CVE-2018-18442 affects the D-Link DCS-825L (firmware 1.08). The vulnerability is a DoS due to insufficient input validation in the firmware, enabling a remote attacker to disrupt device availability (e.g., live video/audio streaming) via crafted or flood-like network traffic (syn/udp/icmp, includ...

ThreatList: Fewer Big DDoS Attacks in Q3, Overall Rate Holds Steady

When it comes to distributed denial of service DDoS attacks, the third quarter of 2018 marked an apparent lull in the action, with fewer huge, multi-day attacks than in previous quarters. Researchers however warn against having a false sense of security: The total number of attacks in the quarter...

Rockwell Automation Allen-Bradley L30ERMS Denial Of Service (CVE-2017-9312)

A denial of service vulnerability exists in Rockwell Automation Allen-Bradley L30ERMS safety devices. The vulnerability is due to improper handling of specially crafted TCP SYN packets. Successful exploitation can result in a denial of service condition...

Design/Logic Flaw

A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the application unexpectedly restarts. The vulnerability is due to incorrect handling of incoming TCP SYN packets to specifi...

Cisco Prime Access Registrar Denial of Service Vulnerability

Cisco Prime Access Registrar and Prime Access Registrar Jumpstar are both access registrars. A resource management error vulnerability exists in TCP connection management in Cisco Prime Access Registrar and Cisco Prime Access Registrar Jumpstart versions prior to 7.3.0.4 and 8.0.1.1, which stems...

Cisco Prime Access Registrar Denial of Service Vulnerability

A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the application unexpectedly restarts. The vulnerability is due to incorrect handling of incoming TCP SYN packets to specifi...