CVE-2020-6098

An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specially crafted Diameter request can trigger a memory corruption resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2020-6098

An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specially crafted Diameter request can trigger a memory corruption resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability...

Oracle January 2020 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released advance notification regarding the January 2020 Critical Patch Update CPU to be released on January 14, 2020. The update addresses 333 vulnerabilities affecting the following software: Oracle Database Server, versions 12.2.0.1, 18c, 19c Oracle Communications Design...

F5 Networks BIG-IP : BIG-IP MRF Diameter vulnerability (K55812535)

TheTraffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K. CVE-2019-6686 Impact BIG-IP This vulnerability affects only virtual servers associated with the message routing diameter...

CVE-2019-6686

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

CVE-2019-6686

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

CVE-2019-6686: Undefined Security Weakness

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

The vulnerability of the Redis database implementation of the Cisco Policy Suite for Mobile software management platform and the Cisco Policy Suite Diameter Routing Agent allows a perpetrator to reduce the effectiveness of the software.

The vulnerability of the Redis database implementation in the Cisco Policy Suite software and the Cisco Policy Suite Diameter Routing Agent is related to authentication errors when accessing the Redis server. Exploiting this vulnerability can allow an attacker to reduce the effectiveness of the...

Oracle Communications Applications Communications Diameter Signaling Router Access Control Error Vulnerability

Oracle Communications Applications is a suite of applications for rapidly delivering and monetizing digital life communications from Oracle Corporation.Communications Diameter Signaling Router DSR is one of the Oracle Communications Diameter Signaling Router component. An access control error...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2399

The CVE-2019-2399 entry affects Oracle Communications Applications’ Communications Diameter Signaling Router (DSR) security subcomponent. Affected: DSRs prior to version 8.3. Root cause described as an access control issue that permits an unauthenticated, network-based attacker (via HTTP) to read...

CVE-2019-2399: Undefined Security Weakness

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Cisco Policy Suite for Mobile and Policy Suite Diameter Routing Agent Access Bypass Vulnerabilities

A security vulnerability exists in the Redis implementation process in Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent. A remote attacker could exploit the vulnerability to modify the key-value pairs of transient events stored by the Redis server...

Authentication flaw

A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...

CVE-2018-0181

A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...

CVE-2018-0181

A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...

CVE-2018-0181: Missing Authentication for Critical Function

A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...