Juniper Networks Junos OS mbuf Denial of Service Vulnerability

Junos OS is prone to a DoS vulnerability by mbuf exhaustion. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Juniper Networks Junos OS RSVP DoS Vulnerability (JSA10652)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS Flowd DoS Vulnerability (JSA10650)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-6380

Juniper Networks Junos OS is affected by a DoS vulnerability (CVE-2014-6380) involving the em interface when connecting to an internal network. Affected versions include 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8...

CVE-2014-3331

The Session Manager component in Packet Data Network Gateway aka PGW in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service process crash via a crafted TCP packet, aka Bug ID CSCuo21914...

Juniper Networks Junos OS TCP Packet Processing Denial of Service Vulnerability

DoS in TCP packet processing SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS Multiple Privilege Escalation Vulnerabilities

Privilege Escalation Vulnerability over CLI SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS RDP Crash Vulnerability

RDP crash when receiving BGP UPDATE with malformed inetflow prefix. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos...

openSUSE Security Update : libexif (openSUSE-SU-2012:0914-1)

Several security issues were found by the Google Security Team in libexif and fixed there. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-440. The text description of this plugi...

openSUSE Security Update : kernel (openSUSE-SU-2013:1005-1)

The openSUSE 12.1 kernel was updated to fix a critical security issue and also some reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi...

openSUSE Security Update : freetype2 (openSUSE-2011-96)

FreeType allowed remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font. CVE-2011-3439, bnc730124 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : gimp (openSUSE-SU-2012:1623-1)

Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability when reading XWD files bnc791372, bgo687392, CVE-2012-5576. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-842...

openSUSE Security Update : kernel (openSUSE-2012-65)

The openSUSE 12.1 kernel was updated to 3.1.9 to fix bugs and security issues. The full list of changes in 3.1.9 is available here : http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.1.9 http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.1.8...

openSUSE Security Update : kernel (openSUSE-SU-2013:0847-1)

The openSUSE 12.1 kernel was updated to fix a severe secrutiy issue and various bugs. Security issues fixed: CVE-2013-2094: The perfsweventinit function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain privileges via a crafted...

openSUSE Security Update : nut (openSUSE-SU-2012:1069-1)

The nut upsd is prone to multiple flaws that allow remote attackers to cause a denial of service application crash by sending unexpected data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : krb5 (openSUSE-SU-2013:0498-1)

krb5 was updated to fix security issues in PKINIT : - fix PKINIT NULL pointer deref in pkinitcheckkdcpkid CVE-2012-1016 bnc807556 - fix PKINIT NULL pointer deref CVE-2013-1415 bnc806715 Also package a missing file on 12.3 bnc794784. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : bind (openSUSE-SU-2012:1649-1)

bind received updates to fix bugs and security issues. On openSUSE 12.2, bind was updated to 9.9.2-P1. On openSUSE 12.1, bind was updated to 9.8.4-P1. Main security fix: CVE-2012-5688: Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might...

openSUSE Security Update : freeradius (openSUSE-SU-2012:1200-1)

This update of freeradius fixes a stack overflow in TLS handling, which can be exploited by remote attackers able to access Radius to execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : cvs (openSUSE-2012-133)

cvs was prone to a heap-based buffer overflow in the client side proxy handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-133. The text description of this plugin is C SUSE...

openSUSE Security Update : opera (openSUSE-SU-2012:0610-1)

The Opera web browser was updated to 11.62 fixing various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-270. The text description of this plugin is C...