PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2018-0296] Thiết bị bảo mật Cisco bị khai thác thông qua lỗ hổng cũ

blog.viettelcybersecurity.com | vulnerability | CVE-2018-0296 | #vulnerability | #cisco | #dos | #asa | #firepower | #cve-2018-0296
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Cisco warned that CVE-2018-0296, patched in 2018, resurfaced in attacks on ASA and Firepower devices, letting unauthenticated attackers cause DoS or read sensitive system information.
CVE
CVE-2018-0296
Published
Collected

Related coverage

vulnerability · blog.viettelcybersecurity.com
[CVE-2021-32763] Giới thiệu về kỹ thuật Regular Expression Denial of Service
Using CVE-2021-32763, a ReDoS in OpenProject, as a case study, the author explains regex denial of service through NFA/DFA theory and how evil regexes trigger catastrophic backtracking.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
vulnerability · blog.trailofbits.com
Out of the kernel, into the tokens
Trail of Bits details two disclosures: a 'billion hashes' DoS in JOSE libraries via attacker-controlled PBES2 iteration counts, and a KASLR bypass from privilege-less Linux containers.
vulnerability · blog.trailofbits.com
Numbers turned weapons: DoS in Osmosis’ math library
Trail of Bits discloses a DoS in Osmosis' math library: an unbounded Taylor-series loop in PowApprox lets crafted transactions burn seconds of compute for little gas, enough to halt the chain.
vulnerability · blog.trailofbits.com
Keeping the wolves out of wolfSSL
Trail of Bits discloses four wolfSSL vulnerabilities (CVE-2022-38152, CVE-2022-38153, CVE-2022-39173, CVE-2022-42905) discovered automatically with tlspuffin, a Dolev-Yao model-guided protocol fuzzer. All four can cause denial of service, with CVSS scores from medium to critical.
Back