CVE-2018-0031

CVE-2018-0031 affects Juniper Networks Junos OS where processing of transit UDP/IP packets over MPLS on MPLS-enabled interfaces can bypass a stateless firewall filter. The vulnerability requires specially crafted UDP packets encapsulated in an exact format; while individual packets do not crash s...

CVE-2018-0031 Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9604 DESCRIPTION: Linux Kernel could allow a local attacker to bypass security restrictions, caused by an error in the built-in keyrings for...

Security Bulletin: mDNS vulnerability affects IBM Security Access Manager for Web (CVE-2015-1892)

Summary A vulnerability in mDNS affects IBM Security Access Manager for Web. Vulnerability Details CVEID: CVE-2015-1892 DESCRIPTION: IBM Security Access Manager for Web could allow a remote attacker to send specially crafted UDP packets to extract information from the mDNS service. CVSS Base Scor...

Memcrashed-DDoS-Exploit - DDoS Attack Tool For Sending Forged UDP Packets To Vulnerable Memcached Servers Obtained Using Shodan API

This tool allows you to send forged UDP packets to Memcached servers obtained from Shodan.io Prerequisites The only thing you need installed is Python 3.x apt-get install python3 You also require to have Scapy and Shodan modules installed pip install scapy pip install shodan Using Shodan API This...

OracleVM 3.3 : dhcp (OVMSA-2018-0024)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...

Memcached DDoS Exploit Code and List of 17,000 Vulnerable Servers Released

Two separate proofs-of-concept PoC exploit code for Memcached amplification attack have been released online that could allow even script-kiddies to launch massive DDoS attacks using UDP reflections easily. The first DDoS tool is written in C programming language and works with a pre-compiled lis...

CVE-2018-5255

The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...

CVE-2018-5255

The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...

CVE-2018-5255

The CVE affects Arista EOS Mlag agent: in EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F, remote attackers can trigger a DoS by sending crafted UDP packets, restarting the Mlag agent. A fix is available: EOS 4.19.4M or 4.20.2F or later, via patches (CVE-2018-5255 hotfixes CVE-2018-5255-4-19-hotf...

CVE-2018-5255: Undefined Security Weakness

The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...

PT-2018-16843

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.19 through 4.19.4M Arista EOS versions 4.20 through 4.20.2F Description The issue allows remote attackers to cause a denial of service, specifically an agent restart, by sending crafted UDP packets to the switch's IP...

CVE-2018-5794

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet...

Extreme Networks ExtremeWireless WiNG Authentication Bypass Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks. A security vulnerability exists in Extreme Networks ExtremeWireless WiNG version 5.x prior to 5.8.6.9 and version 5.9.x prior to 5.9.1.3, which stems from a program that fails to perform authentication...

CVE-2018-5330

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service router unreachable/unresponsive via a flood of fragmented UDP packets...

CVE-2018-5330

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service router unreachable/unresponsive via a flood of fragmented UDP packets...

PT-2018-16899

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW version v3 Description The issue allows remote attackers to cause a denial of service, making the router unreachable or unresponsive, by sending a flood of fragmented UDP packets. Recommendations For ZyXEL P-660HW version v3,...

CVE-2018-5330: Undefined Security Weakness

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service router unreachable/unresponsive via a flood of fragmented UDP packets...

CVE-2017-17439

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...

ALPINE-CVE-2017-17439

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...