Lucene search
+L

1548 matches found

Cvelist
Cvelist
•added 2021/07/15 8:01 p.m.•39 views

CVE-2021-0292 Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

6.5CVSS6.7AI score0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/15 8:01 p.m.•44 views

CVE-2021-0289 Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

6.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/15 8:01 p.m.•105 views

CVE-2021-0289

The CVE-2021-0289 issue in Juniper Junos OS is a TOCTOU race condition between the Device Control Daemon (DCD) and the firewall process (dfwd) that can bypass a user-defined ARP Policer on AE interfaces. Affected software includes Junos OS across multiple releases (from 5.6R1 up to but excluding ...

6.5CVSS5.6AI score0.00261EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•10 views

CVE-2021-0289: Time-of-check Time-of-use (TOCTOU) Race Condition

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/07/14 4:00 p.m.•12 views

CVE-2021-0289

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

6.5CVSS6.3AI score0.00261EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/07/14 4:00 p.m.•12 views

CVE-2021-0292

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•22 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS that arises from a check-time contention condition between the device control...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•21 views

Juniper Networks Junos OS Evolved 资源管理错误漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A resource management error vulnerability exists in Junos OS Evolved due to an uncontrolled resource consumption vulnerability in the device's ARP daemon and Network Discovery Protocol process, which could all...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/07/14 12:00 a.m.•5 views

PT-2021-3665

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 5.6R1 through 18.4R2-S8 Juniper Networks Junos OS versions 18.4R3 through 18.4R3-S8 Juniper Networks Junos OS versions 19.4 through 19.4R3-S2 Juniper Networks Junos OS versions 20.1 through 20.1R2 Juniper...

6.5CVSS0.00261EPSS
SaveExploits0References4
OSV
OSV
•added 2021/07/13 11:15 a.m.•14 views

CVE-2021-25671

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

4.3CVSS5.7AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/13 11:15 a.m.•31 views

CVE-2021-25671

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

4.3CVSS0.00375EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/07/13 11:15 a.m.•12 views

CVE-2021-25671

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

4.3CVSS5AI score0.00375EPSS
SaveExploits0References2
Prion
Prion
•added 2021/07/13 11:15 a.m.•30 views

Design/Logic Flaw

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

3.3CVSS4.3AI score0.00375EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2021/07/13 11:02 a.m.•73 views

CVE-2021-25671

CVE-2021-25671 affects Siemens RWG Universal Controllers RWG1.M8, RWG1.M12, and RWG1.M12D (all versions

4.3CVSS4.2AI score0.00375EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/13 11:02 a.m.•48 views

CVE-2021-25671

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

4.5AI score0.00375EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/13 12:00 a.m.•6 views

CVE-2021-25671: Allocation of Resources Without Limits or Throttling

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

4.3CVSS5.6AI score0.00375EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•6 views

PT-2021-16742

Name of the Vulnerable Software and Affected Versions RWG1.M12 versions prior to V1.16.16 RWG1.M12D versions prior to V1.16.16 RWG1.M8 versions prior to V1.16.16 Description A vulnerability has been identified that could cause a partial denial-of-service when specially crafted ARP packets are sen...

4.3CVSS0.00375EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2021/06/24 8:28 p.m.•77 views

Improper network isolation in Hashicorp Nomad

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1...

6.5CVSS3.5AI score0.00512EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/06/24 8:28 p.m.•44 views

GHSA-VF6Q-9F2F-MWHV Improper network isolation in Hashicorp Nomad

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1...

6.5CVSS6.3AI score0.00512EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/06/18 5:29 p.m.•71 views

CVE-2021-32575

A flaw was found in Nomad. The bridge networking mode in HashiCorp Nomad and Nomad Enterprise allows ARP spoofing from other bridged tasks on the same node...

6.5CVSS1.3AI score0.00512EPSS
SaveExploits0References4
Rows per page
Query Builder