Code injection

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901: Uncontrolled Resource Consumption

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

PT-2017-15086

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW version v3 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by flooding the device with IP packets that have a TTL of 1. Recommendations For ZyXEL P-660HW version v3,...

ZyXEL P-660HW TTL Expiry Denial Of Service

Exploit Title: ZyXEL TTL Expiry Denial of Service CVE: CVE-2017-17901 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://www.zyxel.com/ Version : v3 Tested on: ZyXEL P-660HW Category: Network Appliance Author Mail : [email protected] description: According to RFC 791, the...

A state of constant uncertainty or uncertain constancy? Fast flux explained

Last August, WireX made headlines. For one thing, it was dubbed the first-known DDoS botnet that used the Android platform. For another, it used a technique that—for those who have been around in the industry for quite a while now—rung familiar in the ears: fast flux. In the context of...

DNSmasq Integer Underflow Denial Of Service (CVE-2017-13704)

An integer underflow vulnerability exists over Dnsmasq. This is due to the way Dnsmasq handles TTL requests. A successful attack could lead to a denial of service...

Dnsmasq Lack of Free Denial of Service (CVE-2017-14495)

A denial of service vulnerability exists over Dnsmasq. This is due to the way Dnsmasq handles TTL requests. A successful attack could lead to a denial of service...

Akamai's DNS Contribution to Internet Resiliency

Background Akamai Technologies recently contributed its "Serve Stale" DNS algorithm to Version 9 of the Internet Systems Consortium's ISC Berkeley Internet Name Domain BIND open source Domain Name System DNS project. As the Internet's most widely used DNS implementation, BIND operates ubiquitousl...

SUSE SLES12 Security Update : quagga (SUSE-SU-2017:2294-1)

This update provides Quagga 1.1.1, which brings several fixes and enhancements. Security issues fixed : - CVE-2017-5495: Telnet 'vty' interface DoS due to unbounded memory allocation. bsc1021669 - CVE-2016-1245: Stack overrun in IPv6 RA receive code. bsc1005258 Bug fixes : - Do not enable zebra's...

mDNS Spoofer

This module will listen for mDNS multicast requests on 5353/udp for A and AAAA record queries, and respond with a spoofed IP address assuming the request matches our regex. This module requires Metasploit: https://metasploit.com/download Current source:...

TTL Master - Possible privilege escalation, Runtime command execution, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application TTL Master published at the 'play' market has multiple vulnerabilities...

By monitoring the TTL response to detection of a remote network topology-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-4/2 0 1 5 4 1 6 1 0 4 9 5 8 9 3 0. png Sometimes, the network administrator can configure an internal network to achieve a single host to other hosts on different levels of communication. A single Internet Protocol IP address may be representative of many on the internal...

OracleVM 2.2 : glibc (OVMSA-2015-0024) (GHOST)

The remote OracleVM system is missing necessary patches to address critical security updates : - Switch to use malloc when the input line is too long Orabug 19951108 - Use a /sys/devices/system/cpu/online for SCNPROCESSORSONLN implementation Orabug 17642251 Joe Jin - Fix parsing of numeric hosts ...

F5 Networks BIG-IP : BIND vulnerability (SOL15481)

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a 'ghost domain names' attack. CVE-2012-10...

Who Needs a Botnet when you have a 4 Gbps DDoS Cannon?

In recent months the DDoS world has shifted from complex small scale Botnet attacks to much larger network based DDoS attacks, perpetrated largely by hijacked web servers. How many of these hijacked servers are out there remains to be seen. However, Incapsula recently got a very good idea of just...

Who Needs a Botnet when you have a 4 Gbps DDoS Cannon?

In recent months the DDoS world has shifted from complex small scale Botnet attacks to much larger network based DDoS attacks, perpetrated largely by hijacked web servers. How many of these hijacked servers are out there remains to be seen. However, Incapsula recently got a very good idea of just...

LLMNR Spoofer

LLMNR Link-local Multicast Name Resolution is the successor of NetBIOS Windows Vista and up and is used to resolve the names of neighboring computers. This module forges LLMNR responses by listening for LLMNR requests sent to the LLMNR multicast address 224.0.0.252 and responding with a...

CVE-2012-1570

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain name...