Lucene search
+L

833 matches found

NVD
NVD
added 2023/03/23 5:15 p.m.28 views

CVE-2023-20080

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

8.6CVSS8.4AI score0.00951EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/23 5:15 p.m.26 views

Input validation

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

5CVSS7.5AI score0.00951EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2023/03/23 5:15 p.m.28 views

Input validation

A vulnerability in the IPv6 DHCP DHCPv6 client module of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

2.6CVSS5.8AI score0.00678EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment
added 2023/03/23 12:00 a.m.22 views

CVE-2023-20080 Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

8.6CVSS7.3AI score0.00951EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/23 12:00 a.m.136 views

CVE-2023-20081

CVE-2023-20081 affects Cisco ASA, FTD, IOS, and IOS XE IPv6 DHCP (DHCPv6) client. Root cause: insufficient validation of DHCPv6 messages in the client module, enabling an unauthenticated remote attacker to trigger a device reload and cause a DoS. Exploitation requires control of the DHCPv6 server...

6.8CVSS6.2AI score0.00678EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/23 12:00 a.m.52 views

CVE-2023-20081 Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability

A vulnerability in the IPv6 DHCP DHCPv6 client module of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

6.8CVSS6.9AI score0.00678EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/23 12:00 a.m.43 views

CVE-2023-20080 Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

8.6CVSS8.6AI score0.00951EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/23 12:00 a.m.143 views

CVE-2023-20080

CVE-2023-20080 affects Cisco IOS and IOS XE DHCPv6 relay and server features. The root cause is insufficient validation of data boundaries in DHCPv6 processing, allowing unauthenticated remote attackers to trigger a DoS that can cause a device to reload. Exploitation involves sending crafted DHCP...

8.6CVSS7.7AI score0.00951EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
added 2023/03/22 4:00 p.m.94 views

Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

8.6CVSS7.7AI score0.00951EPSS
SaveExploits0References1
Cisco
Cisco
added 2023/03/22 4:00 p.m.78 views

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability

A vulnerability in the IPv6 DHCP DHCPv6 client module of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

6.8CVSS6.2AI score0.00678EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/22 12:00 a.m.7 views

PT-2023-2111 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and IOS XE Software affected versions not specified Description: The issue is related to insufficient validation of data boundaries in the IPv6 DHCP version 6 DHCPv6 relay and server features. This could allow an unauthenticated,...

8.6CVSS7.3AI score0.00951EPSS
SaveExploits0References5
F5 Networks
F5 Networks
added 2023/02/21 7:00 p.m.42 views

K36228121: BIG-IP DHCPv6 vulnerability CVE-2019-6643

Security Advisory Description An attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the Traffic Management Microkernel TMM process to produce a core file. CVE-2019-6643 Impact This vulnerability may allow an...

7.5CVSS7.3AI score0.01348EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
added 2023/02/21 6:55 p.m.60 views

K39573942: DHCP vulnerability CVE-2019-6470

Security Advisory Description There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this...

7.5CVSS6.8AI score0.08813EPSS
SaveExploits1
F5 Networks
F5 Networks
added 2023/02/21 6:47 p.m.48 views

K08832573: DHCP vulnerability CVE-2021-25217

Security Advisory Description In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are beyond their End-of-Life EOL and no longer supported by ISC. From inspection it is clear that the...

7.4CVSS7.5AI score0.06118EPSS
SaveExploits1Affected Software15
F5 Networks
F5 Networks
added 2023/02/21 6:34 p.m.49 views

K44834280: Multiple Treck vulnerabilities CVE-2020-25066, CVE-2020-27336, CVE-2020-27337, and CVE-2020-27338

Security Advisory Description CVE-2020-25066 A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service crash/reset or to possibly execute arbitrary code. CVE-2020-27336 An issue was discovered in Treck IPv6 before 6.0.1.68...

10CVSS7.4AI score0.03348EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:57 a.m.10 views

SUSE CVE-2010-3611

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field...

4.3CVSS6.8AI score0.09402EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:55 a.m.8 views

SUSE CVE-2011-0413

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service assertion failure and daemon crash by sending a message over IPv6 for a declined and abandoned address...

7.8CVSS6.8AI score0.32751EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:52 a.m.7 views

SUSE CVE-2011-2717

The DHCPv6 client dhcp6c as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

10CVSS7.8AI score0.0393EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:28 a.m.5 views

SUSE CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

5CVSS6.8AI score0.02685EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.6 views

SUSE CVE-2017-5597

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow...

7.5CVSS7.2AI score0.02004EPSS
SaveExploits0References5
Rows per page
Query Builder