CVE-2020-1648

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1640

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

Code injection

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

SUSE-SU-2020:1943-1 Security update for xrdp

This update for xrdp provides the following fix: - CVE-2020-4044: xrdp-sesman can be crashed remotely over port 3350 bsc1173580. - Fixed an issue where xrdp-sesman could not restart bsc1155952. - Fixed an issue where xrdp could not start due to an error in the service file use absolute path in...

[SECURITY] Fedora 32 Update: xen-4.13.1-4.fc32

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

logd daemon Code Execution

The vulnerability of logd daemon in the PAN-OS operating system is related to the use of an uncontrolled format string. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain elevated privileges...

WPA Protocol Implementation hostapd credential disclosure

The vulnerability of the WPA protocol implementation in the hostapd daemon software is related to security mechanism errors. Exploiting this vulnerability can allow a malicious actor to obtain user credentials remotely...

Tenda AC15 AC1900 Trust Management Issue Vulnerability

Tenda AC15 AC1900 is a wireless router from Tenda, a Chinese company. A trust management issue vulnerability exists in the tendalogin binary in the Tenda AC15 AC1900 version 15.03.05.19, which can be exploited by an unauthenticated, remote attacker to start the telnetd service on the device...

Lightning Network Daemon Security Vulnerability

A security vulnerability exists in Lightning Network Daemon lnd versions prior to 0.7 that stems from incorrect access control in the program. An attacker could exploit the vulnerability by not paying or underpaying the total cash amount of a transaction...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49037)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability in Juniper Networks Junos OS BGP update message handling can be exploited by an attacker to cause the Routing Process Daemon RPD to crash and restart...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49038)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability in Juniper Networks Junos OS BGP message processing can be exploited by an attacker to cause the Routing Process Daemon RPD to crash and restart...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-51514)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the improper use of an authentication...

[SECURITY] [DLA 2274-1] fwupd security update

Package : fwupd Version : 0.7.4-2+deb9u1 CVE ID : CVE-2020-10759 Debian Bug : 962517 It was discovered that there was a possible signature verification issue in firmware update daemon library "fwupd" as the return value of gpgmeopverifyresult was not being checked. For Debian 9 "Stretch", this...

PT-2020-5898

Name of the Vulnerable Software and Affected Versions: Junos OS versions 17.2X75 through 17.2X75-D105.18 Junos OS versions 17.3 through 17.3R3-S7 Junos OS versions 17.4 through 17.4R2-S9 Junos OS versions 18.1 through 18.1R3-S9 Junos OS versions 18.2 through 18.2R2-S6 Junos OS versions 18.2X75...

FreeBSD : dbus file descriptor leak (27616957-b084-11ea-937b-b42e99a1b9c3)

GitHub Security Lab reports : D-Bus has a file descriptor leak, which can lead to denial of service when the dbus-daemon runs out of file descriptors. An unprivileged local attacker can use this to attack the system dbus-daemon, leading to denial of service for all users of the machine. C Tenable...

Fedora: Security Advisory for ntp (FEDORA-2020-a0b39d58db)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

NETGEAR R6700v3 Password Reset / Remote Code Execution Exploit

This document describes a stack overflow vulnerability that was found in October, 2019 and presented in the Pwn2Own Mobile 2019 competition in November 2019. The vulnerability is present in the UPNP daemon /usr/sbin/upnpd, running on NETGEAR R6700v3 router with firmware versions V1.0.4.8210.0.57...

EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2020-1701)

According to the version of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denia...

NETGEAR R6700v3 Password Reset / Remote Code Execution

tokyodrift ======= Summary This document describes a stack overflow vulnerability that was found by Pedro Ribeiro @pedrib1337 | [email protected] and Radek Domanski @RabbitPro in October 2019 and presented in the Pwn2Own Mobile 2019 competition in November 2019. The vulnerability is present in the...

CVE-2020-15025

ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...