Lucene search
+L

506 matches found

CVE
CVE
added 2019/03/27 11:45 p.m.120 views

CVE-2019-1746

CVE-2019-1746 affects Cisco IOS and IOS XE where the CMP (Cluster Management Protocol) processing code fails input validation, enabling an unauthenticated, adjacent attacker to trigger a denial-of-service by sending crafted CMP packets. A successful exploit can crash the switch and cause an autom...

7.4CVSS6.9AI score0.0064EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2019/03/27 11:45 p.m.9 views

CVE-2019-1746 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

7.4CVSS7AI score0.0064EPSS
SaveExploits0References2
Cisco
Cisco
added 2019/03/27 4:00 p.m.105 views

Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

7.4CVSS2AI score0.0064EPSS
SaveExploits0References1
Fedora
Fedora
added 2019/03/15 6:30 p.m.40 views

[SECURITY] Fedora 29 Update: kubernetes-1.12.5-2.fc29

Container cluster management...

9.8CVSS1.9AI score0.86978EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.8 views

The vulnerability of the Kubernetes cluster management software, related to improper error handling, allows a perpetrator to escalate their privileges.

The vulnerability of the Kubernetes cluster management software is related to incorrect error handling. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

9.8CVSS7.6AI score0.86978EPSS
SaveExploits10References3Affected Software1
Fedora
Fedora
added 2019/02/09 2:17 a.m.25 views

[SECURITY] Fedora 29 Update: slurm-17.11.13-2.fc29

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

9.8CVSS1.7AI score0.02332EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:00 a.m.16 views

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol allows a attacker to cause a service failure in Cisco IOS and Cisco IOS XE operating systems.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures using...

7.4CVSS7.2AI score0.00856EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2018/12/10 12:00 a.m.7 views

PT-2018-2976 · Clusterlabs +5 · Pacemaker +5

Name of the Vulnerable Software and Affected Versions: Pacemaker versions up to and including 2.0.1 Description: The issue is related to an uncontrolled resource consumption in the Pacemaker cluster resource management software, which can be exploited to cause a denial of service DoS. This could...

9CVSS6.4AI score0.02027EPSS
SaveExploits0References91
RedHat Linux
RedHat Linux
added 2018/11/20 3:11 a.m.8 views

atomic-openshift: oc patch with json causes masterapi service crash

An out of bounds write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform 3.x. An attacker can use this flaw to cause a denial of service attack on the Openshift master API service which provides cluster management...

7.7CVSS7.2AI score0.01952EPSS
SaveExploits0References4
OSV
OSV
added 2018/10/05 2:29 p.m.12 views

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS5.8AI score0.00856EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/05 2:29 p.m.29 views

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS7.4AI score0.00856EPSS
SaveExploits0References3
Prion
Prion
added 2018/10/05 2:29 p.m.20 views

Input validation

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

6.1CVSS7.3AI score0.00856EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2018/10/05 2:00 p.m.39 views

CVE-2018-0475 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4AI score0.00856EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/10/05 2:00 p.m.17 views

CVE-2018-0475 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

6.9AI score0.00856EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/10/05 12:00 a.m.94 views

Cisco IOS XE Software Cluster Management Protocol DoS Vulnerability (cisco-sa-20180926-cmp)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

7.4CVSS7.3AI score0.00856EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/09/29 12:00 a.m.18 views

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-20297)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices.Cluster Management Protocol is one of the cluster management protocols. A denial of service vulnerability exists in Cluster Management Protocol in Cisco IOS Software and IOS XE Software. A...

7.4CVSS7.1AI score0.00856EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/09/26 4:00 p.m.67 views

Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS1.7AI score0.00856EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2018/09/26 4:11 a.m.7 views

atomic-openshift: oc patch with json causes masterapi service crash

An out of bounds write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform 3.x. An attacker can use this flaw to cause a denial of service attack on the Openshift master API service which provides cluster management...

7.7CVSS7.2AI score0.01952EPSS
SaveExploits0References4
NVD
NVD
added 2018/09/06 2:29 p.m.50 views

CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

7.7CVSS7.3AI score0.01952EPSS
SaveExploits0References7
Prion
Prion
added 2018/09/06 2:29 p.m.21 views

Cross site scripting

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

4CVSS7.2AI score0.01952EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder