CVE-2020-8516

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

PT-2020-20191 · Tor +2 · Tor +2

Name of the Vulnerable Software and Affected Versions: Tor versions 0.4.1.8 and 0.4.2.x through 0.4.2.6 Description: The daemon in Tor does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit informatio...

CVE-2019-12999

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

CVE-2019-12999

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

CVE-2019-12999

The CVE-2019-12999 issue affects the Lightning Network Daemon (lnd) up to version 0.7 (pre-0.7). The root cause is Incorrect/ Improper Access Control, enabling attackers to trigger loss of funds. Public document sets (GHSA-78HJ-86CR-6J2V and OSV entries) corroborate an access-control weakness in ...

CVE-2019-12999

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

PT-2020-9354 · Unknown · Lightning Network Daemon

Name of the Vulnerable Software and Affected Versions: Lightning Network Daemon lnd versions prior to 0.7 Description: The issue is related to Incorrect Access Control, allowing attackers to trigger loss of funds. This is due to Improper Access Control in the Lightning Network Daemon...

CVE-2019-12999: Undefined Security Weakness

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

CVE-2020-8446

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to path traversal with write access via crafted syscheck messages written directly to the analysisd UNIX domain socket by a local user...

CVE-2020-8444

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a use-after-free during processing of ossec-alert formatted msgs received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted...

CVE-2020-8448

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a denial of service NULL pointer dereference via crafted messages written directly to the analysisd UNIX domain socket by a local user...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

UBUNTU-CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

UBUNTU-CVE-2015-8012

lldpd before 0.8.0 allows remote attackers to cause a denial of service assertion failure and daemon crash via a malformed packet...

CVE-2015-8011

CVE-2015-8011 (buffer overflow in lldp_decode of lldpd) affects Open vSwitch/openvswitch builds and allows remote attackers to cause a daemon crash or potentially execute arbitrary code via large management addresses and TLV boundary handling in lldpd before 0.8.0. Documented impacts include deni...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

CVE-2015-8012

lldpd before 0.8.0 allows remote attackers to cause a denial of service assertion failure and daemon crash via a malformed packet...

CVE-2015-8011: Buffer Copy without Checking Size of Input

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

CVE-2018-5745

An assertion failure was found in the way bind implemented the "managed keys" feature. An attacker could use this flaw to cause the named daemon to crash. This flaw is very difficult for an attacker to trigger because it requires an operator to have BIND configured to use a trust anchor managed b...

PT-2020-6312 · Libvirt +8 · Libvirt +8

Name of the Vulnerable Software and Affected Versions: libvirt versions 3.10.0 through 5.x Description: A NULL pointer dereference was found in the libvirt API for fetching a storage pool based on its target path. This flaw affects storage pools created without a target path, such as network-base...