CVE-2019-13265

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert...

CVE-2019-13268: Improper Input Validation

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage ...

CVE-2019-13271: Undefined Security Weakness

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert...

CVE-2018-0063

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

Design/Logic Flaw

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

CVE-2018-0063: Uncontrolled Resource Consumption

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

PT-2018-8595

Name of the Vulnerable Software and Affected Versions: Junos OS version 17.3R3 Description: A flood of ARP requests sent to the management interface may exhaust the private Internal routing interfaces IRIs next-hop limit, leading to a sustained denial of service DoS condition. This issue is...

ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution

Remote Code Execution Component: networkmap CVE: CVE-2017-6548 networkmap is responsible for generating a map of computers connected to the router. It continuously monitors the LAN to detect ARP requests submitted by unknown computers. When a new MAC address appears it will probe the related IP...

Cisco ASA Ethernet Information Leak

!/usr/bin/env python CVE-2003-0001 'Etherleak' exploit ================================= Exploit for hosts which use a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory allocated to the device driver, or...

CVE-2010-2979: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service buffer leak and device crash via ARP requests that trigger an ARP storm, aka Bug ID CSCte43508...

ARP Sweep Local Network Discovery

Enumerate alive Hosts in local network using ARP requests. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ARP Sweep Local Network Discovery', 'Description' = %q Enumerate alive Hosts in local...

FreeBSD Security Advisory (FreeBSD-SA-03:14.arp.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:14.arp.asc ADV FreeBSD-SA-03:14.arp.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2006-6538: Undefined Security Weakness

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause 1 a denial of service device reset via a flood of ARP replies on the wired or wireless radio link and 2 a denial of service device crash via a flood of ARP requests on the wireless link...

Cisco Aironet wireless access points DoS

arp-requests flood from wireless interface leads to memory exhaustion...

CVE-2004-2001: Undefined Security Weakness

ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received...

Zyxel Prestige 681 SDSL router information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Zyxel P681 with ZyNOS S/W Version: Vt020225a | 2/25/2002 installed leaks random portions of memory in ARP requests: 21:47:05.709295 arp who-has x.x.x.x tell x.x.x.x 0x0000 0001 0800 0604 0001 00a0 c526 3cc1 xxxx ................ 0x0010 xxxx 000...

CVE-2004-2001

ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received...

Microsoft Windows Vista - ARP Table Entries Denial of Service

Microsoft Windows Vista - ARP Table Entries Denial of Service source: https://www.securityfocus.com/bid/23266/info Microsoft Windows Vista is prone to a denial-of-service vulnerability. Remote attackers may exploit this issue by submitting malicious ARP requests to the vulnerable computer. To...

Microsoft Windows Vista - ARP Table Entries Denial of Service

source: https://www.securityfocus.com/bid/23266/info Microsoft Windows Vista is prone to a denial-of-service vulnerability. Remote attackers may exploit this issue by submitting malicious ARP requests to the vulnerable computer. To exploit this issue, attackers must have access to the local netwo...

CVE-2003-0804

The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service resource starvation and panic via a flood of spoofed ARP requests...