CVE-2021-0289

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

Juniper Networks Junos OS Evolved 资源管理错误漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A resource management error vulnerability exists in Junos OS Evolved due to an uncontrolled resource consumption vulnerability in the device's ARP daemon and Network Discovery Protocol process, which could all...

PT-2021-3645

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S12 Juniper Networks Junos OS versions prior to 17.4R3-S5 Juniper Networks Junos OS versions prior to 18.1R3-S13 Juniper Networks Junos OS versions prior to 18.2R3-S8 Juniper Networks Junos OS...

Juniper Networks Junos OS 代码问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS that stems from the fact that on devices with multipathing or add-a-path...

Juniper Networks Junos OS 代码问题漏洞

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. that is specific to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to a code issue that stems from the use of a resource publ...

PT-2021-3643

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 19.4 through 19.4R1-S4, 19.4R3-S2; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R2 Juniper Networks Junos OS Evolved versions 20.3-EVO prior t...

Juniper Networks Junos OS Evolved 代码问题漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Junos OS Evolved suffers from a code issue vulnerability that stems from a device configured with the ISIS Flexibility Algorithm for segmented routing and sensor-based statistics, where a single flap in an ISI...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS that arises from a check-time contention condition between the device control...

PT-2021-3665

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 5.6R1 through 18.4R2-S8 Juniper Networks Junos OS versions 18.4R3 through 18.4R3-S8 Juniper Networks Junos OS versions 19.4 through 19.4R3-S2 Juniper Networks Junos OS versions 20.1 through 20.1R2 Juniper...

Juniper Junos OS DoS (JSA11054)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11054 advisory. When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets...

Apache MINA 安全漏洞

Apache MINA is the United States Apache Apache Foundation of a web application framework. It is primarily used to develop high-performance and highly scalable web applications. Apache MINA has a security vulnerability that originates from a vulnerability in SSHD -core of Apache MINA SSHD. An...

ConnMan: Multiple vulnerabilities

Background ConnMan provides a daemon for managing Internet connections. Description Multiple vulnerabilities have been discovered in connman. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no kno...

IBM AIX Input Validation Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...

CVE-2021-36217

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

PT-2021-21182

Name of the Vulnerable Software and Affected Versions Avahi version 0.8 Description The issue allows a local denial of service, resulting in a NULL pointer dereference and daemon crash against avahi-daemon. This can be achieved via the D-Bus interface or by executing a ping .local command...

Huawei EulerOS: Security Advisory for trousers (EulerOS-SA-2021-2171)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : dbus (EulerOS-SA-2021-2133)

According to the version of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when...

EulerOS Virtualization 3.0.2.2 : trousers (EulerOS-SA-2021-2171)

According to the versions of the trousers package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss use...

SUSE Linux Enterprise Server Privilege Escalation

The vulnerability of SUSE Linux Enterprise Server and openSUSE Leap lies in the improper assignment of permissions to files. Exploiting this vulnerability allows an attacker to enable the arpwatch daemon and elevate their privileges to the root level...

Advisory ROSA-SA-2021-1989

Software: trousers 0.3.14 OS: Cobalt 7.9 CVE-ID: CVE-2020-24330 CVE-Crit: HIGH CVE-DESC: A problem was discovered in TrouSerS before 0.3.14. If the tcsd daemon is running with root privileges and not the tss user, it will not be able to reset the root gid privilege when it is no longer needed...