PT-2019-15175

Name of the Vulnerable Software and Affected Versions Hydra versions prior to 0.1.9 Description The issue arises from a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-Length header. This is attributed to the process header end function, which calls boa...

CVE-2019-17502: NULL Pointer Dereference

Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-Length header. read.c, request.c, and util.c contribute to this. The processheaderend function calls boaatoi, which ultimately calls atoi on a NULL pointer...

CVE-2019-17414

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service "vngetstring error: Resource temporarily unavailable" error and daemon crash via a long URL...

CVE-2019-0061

The management daemon MGD is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a...

CVE-2019-0061

The management daemon MGD is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a...

CVE-2019-0066

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

CVE-2019-0051

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...

Design/Logic Flaw

The management daemon MGD is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a...

CVE-2019-0051 SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...

CVE-2019-0051: Improper Handling of Exceptional Conditions

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...

PT-2019-15140

Name of the Vulnerable Software and Affected Versions tinylcy Vino through 2017-12-15 Description The issue allows remote attackers to cause a denial of service, resulting in a "vn get string error: Resource temporarily unavailable" error and daemon crash, via a long URL. Recommendations For...

PT-2019-3867

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX5000 Series versions 12.3X48 through 12.3X48-D84 Juniper Networks Junos OS on SRX5000 Series versions 15.1X49 through 15.1X49-D179 Juniper Networks Junos OS on SRX5000 Series versions 17.3 through 17.3R3-S6...

CVE-2019-17414: Undefined Security Weakness

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service "vngetstring error: Resource temporarily unavailable" error and daemon crash via a long URL...

PT-2019-3485

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D171, 15.1X49-D180 Junos OS versions prior to 15.1X53-D496, 15.1X53-D69 Junos OS versions prior to 16.1R7-S4 Junos OS versions prior to 16.2R2-S9 Junos OS versions prior to 17.1R3 Junos OS versions prior to...

CVE-2008-5718

The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...

Denial Of Service (DoS)

libpcap.so is vulnerable to denial of service DoS. rpcapd/daemon.c uses a crypt call which causes a NULL pointer dereference and daemon crash upon failure...

ALPINE-CVE-2019-15163

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service NULL pointer dereference and daemon crash if a crypt call fails...

DEBIAN-CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

DEBIAN-CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...