Network Time Protocol Daemon (ntpd) 4.x < 4.2.8p9 Multiple Vulnerabilities

The version of the remote NTP server is 4.x prior to 4.2.8p9. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists when rate limiting is configured for all associations, the limits also being applied to responses received from the configured...

Stack Buffer Overflow Vulnerability in Range Networks OpenBTS/OpenBTS-UMTS

Range Networks OpenBTS/OpenBTS-UMTS is software for analog protocol stacks for GSM networks. A stack buffer overflow vulnerability exists in Range Networks OpenBTS/OpenBTS-UMTS. An attacker could exploit the vulnerability by sending an oversized UDP packet that causes a memory buffer overflow,...

MGASA-2016-0270 Updated glibc and libtirpc packages fixes security vulnerability

A stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets CVE-2016-4429. A similar issue was fixed ...

RHEL 6 : kernel (RHSA-2016:1225)

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

DEBIAN-CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

Stack overflow

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

UBUNTU-CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

RHEL 6 : kernel (RHSA-2016:1100)

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to an improper handling of crafted, fragmented IKEv2 packets. An...

Cisco IOS Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability (cisco-sa-20160323-ios-ikev2)

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced...

Nginx DNS Resolver Denial of Service (CVE-2016-0742)

A denial-of-service vulnerability exists in NGINX. The vulnerability is due to nginx dereferencing an invalid pointer while processing certain DNS packets. A remote, man-in-the-middle attacker could exploit this vulnerability by forging UDP packets as if from a trusted DNS server...

Cisco IOS XE IKEv2 Fragmentation DoS (cisco-sa-20160323-ios-ikev2)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of fragmented IKEv2 packets. An unauthenticated, remote attacker can...

Cisco IOS IKEv2 Fragmentation DoS (cisco-sa-20160323-ios-ikev2)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of fragmented IKEv2 packets. An unauthenticated, remote attacker can exploit...

PT-2016-1619

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.6 Cisco IOS XE versions 3.3 through 3.17 Description The issue is related to an improper handling of crafted, fragmented IKEv2 packets in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco...

CVE-2016-1987

HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets...

Code injection

HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets...

CVE-2016-1987: Improper Input Validation

HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets...

PT-2016-4945

Name of the Vulnerable Software and Affected Versions HPE IPFilter version A.11.31.18.21 on HP-UX Description The issue allows remote attackers to cause a denial of service via unspecified UDP packets when a certain keep-state configuration is enabled. Recommendations For HPE IPFilter version...

CVE-2016-1287

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.47.30, 8.7 before 8.71.18, 9.0 before 9.04.38, 9.1 before 9.17, 9.2 before 9.24.5, 9.3 before 9.33.7, 9.4 before 9.42.4, and 9.5 before 9.52.2 on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cis...