2 matches found
Authentication flaw
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets...
PT-2016-4746 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.0 through 9.5.1 Description: The issue is related to the mishandling of IPsec error processing, which can be exploited by remote authenticated users to cause a denial of service memory...