JVN Info.

Id
35682  
Name
JVNDB-2010-001462  
Title
Linux Kernel の ULE decapsulation functionality におけるサービス運用妨害 (DoS) の脆弱性  
Summary
Linux Kernel の dvb-core 内にある ULE decapsulation functionality には、MPEG2-TS フレームの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。  
Nvdinfo
CVE-2010-1086  
Cvssv2
7.8  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001462.html  
Published Date
2010-04-06  
Registered Date
2010-05-25  
Last Updated Date
2011-03-01  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
21569 H28-MOJ-Teikyo-Nara-17-seg-4-20161128-w510.csv 35682 80035 CVE-2014-8730 4.3 Medium 172.30.201.71 tcp 3994 TLS Padding Oracle Information Disclosure Vulnerability (TLS POODLE) It is possible to obtain sensitive information from the remote host with TLS-enabled services. The remote host is affected by a man-in-the-middle (MitM) information disclosure vulnerability known as POODLE. The vulnerability is due to the TLS server not verifying block cipher padding when using a cipher suite that employs a block cipher such as AES and DES. The lack of padding checking can allow encrypted TLS traffic to be decrypted. This vulnerability could allow for the decryption of HTTPS traffic by an unauthorized third party. Contact the vendor for an update. https://www.imperialviolet.org/2014/12/08/poodleagain.html http://www.nessus.org/u?dfaed6bc http://www.nessus.org/u?1daa8d4a
44252 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 35682 80035 CVE-2014-8730 4.3 Medium 172.30.138.71 tcp 3994 TLS Padding Oracle Information Disclosure Vulnerability (TLS POODLE) It is possible to obtain sensitive information from the remote host with TLS-enabled services. The remote host is affected by a man-in-the-middle (MitM) information disclosure vulnerability known as POODLE. The vulnerability is due to the TLS server not verifying block cipher padding when using a cipher suite that employs a block cipher such as AES and DES. The lack of padding checking can allow encrypted TLS traffic to be decrypted. This vulnerability could allow for the decryption of HTTPS traffic by an unauthorized third party. Contact the vendor for an update. https://www.imperialviolet.org/2014/12/08/poodleagain.html http://www.nessus.org/u?dfaed6bc http://www.nessus.org/u?1daa8d4a
55089 13_tokyu_bellselect_20170118.csv 35682 80035 CVE-2014-8730 4.3 Medium 218.45.196.196 tcp 443 TLS Padding Oracle Information Disclosure Vulnerability (TLS POODLE) It was possible to obtain sensitive information from the remote host with TLS-enabled services. The remote host is affected by a man-in-the-middle (MitM) information disclosure vulnerability known as POODLE. The vulnerability is due to the TLS server not verifying block cipher padding when using a cipher suite that employs a block cipher such as AES and DES. The lack of padding checking can allow encrypted TLS traffic to be decrypted. This vulnerability could allow for the decryption of HTTPS traffic by an unauthorized third party. Contact the vendor for an update. https://www.imperialviolet.org/2014/12/08/poodleagain.html https://support.f5.com/csp/#/article/K15882 http://www.nessus.org/u?3bcd20bf