CVE-2019-18792: Interpretation Conflict

An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake FIN packet is injected just before the PUSH ACK packet we want to bypass. The PUSH ACK packet containing the data will be ignored by...

FreeSWITCH mod_event_socket Service Detection

A FreeSWITCH modeventsocket service is running at this host. modeventsocket is a TCP-based interface to control FreeSWITCH. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Active C2 Discovery Using Protocol Emulation Part1 (HYDSEVEN NetWire)

Malware C2 addresses can be an important IOC to detect known threats. In order to obtain C2 information, we first need malware samples which are then analyzed dynamically or statically. However the analysis task is often times not straightforward. Increasingly anti-analysis methods are implemente...

Updated nmap packages fix security vulnerability

Updated nmap packages fix security vulnerability: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service CVE-2018-15173...

openSUSE: Security Advisory for nmap (openSUSE-SU-2019:1462-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for nmap (moderate)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:1462-1 Rating: moderate References: 1104139 1133512 Cross-References: CVE-2018-15173 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now...

Security update for nmap (low)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:1392-1 Rating: low References: 1104139 Cross-References: CVE-2018-15173 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for nmap fixes the...

PT-2019-9661

Name of the Vulnerable Software and Affected Versions ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module version 1.05 Description A Denial of Service issue was discovered, allowing an authenticated user to configure invalid network settings. This stops TCP-based...

CVE-2018-15399

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

PT-2018-3930 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the TCP syslog module could allow an unauthenticated,...

DEBIAN-CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

Code injection

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

CVE-2018-15173

The CVE-2018-15173 issue affects Nmap up to 7.70, where using -sV with a crafted TCP-based service can cause a stack consumption and application crash (DoS). No exploit details provided. Remediation is not explicitly described in the initial doc, but related advisories (e.g., Amazon Linux 2 ALAS-...

CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

PT-2018-12921

Name of the Vulnerable Software and Affected Versions Nmap versions prior to 7.70 Description The issue allows remote attackers to cause a denial of service, resulting in stack consumption and application crash, via a crafted TCP-based service when the -sV option is used. Recommendations For...

CVE-2018-15173: Undefined Security Weakness

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...

CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application crash via a crafted TCP-based service...