CVE-2024-34088

In FRRouting FRR through 9.1, it is possible for the getedge function in ospfte.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service...

CVE-2023-50432

simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes freepacket in dhcppacket.c to dereference a NULL pointer...

CVE-2023-50432

simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes freepacket in dhcppacket.c to dereference a NULL pointer...

CVE-2023-50432

CVE-2023-50432 affects the open-source DHCP server version(s) up to ec976d2. Affected component: DHCP packet handling in simple-dhcp-server. The underlying issue is a NULL pointer dereference in free_packet within dhcp_packet.c when processing a DHCP packet with no option fields, enabling a remot...

PT-2024-13937 · Unknown · Simple-Dhcp-Server

Name of the Vulnerable Software and Affected Versions: simple-dhcp-server through ec976d2 Description: The issue allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes free packet in dhcp packet.c to dereference a NULL...

SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2024:1453-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1453-1 advisory. - CVE-2024-27913: Fixed a denial of service issue via a malformed OSPF LSA packet bsc1220548. - CVE-2024-31948: Fixed...

SUSE CVE-2024-33599

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's nscd fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was...

SUSE CVE-2024-33601

nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's nscd netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was...

OESA-2024-1501 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in initsmb2rsphdr If client send smb2 negotiate request and then send smb1 negotiate request, initsmb2rsphdr is called for smb1 negotiat...

ROS-20240426-01

A vulnerability in the pesign daemon of the systemd service initialization and management subsystem is related to the ability to path traversal. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

ROS-20240426-03

A vulnerability in the pesign daemon of the systemd service initialization and management subsystem is related to the ability to path traversal. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

[SECURITY] Fedora 39 Update: xen-4.17.4-1.fc39

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 40 Update: xen-4.18.2-1.fc40

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

glibc 安全漏洞

glibc GNU C Library is the C standard library implemented by the GNU Project. A security vulnerability exists in glibc, which stems from the possibility that the netgroup cache may terminate the daemon on memory allocation failure...

PT-2024-3320

Name of the Vulnerable Software and Affected Versions glibc versions 2.15 and later Description The issue is a stack-based buffer overflow in the netgroup cache of the Name Service Cache Daemon nscd. This occurs when the nscd's fixed size cache is exhausted by client requests, and a subsequent...

ROS-20240423-02

Vulnerability of gnew0 function of Libvirt virtualization management library is related to incorrect checking of negative array length before memory allocation. checking for negative array length before allocating memory. Exploitation of the vulnerability could allow an attacker to cause a denial...

[SECURITY] [DSA 5669-1] guix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5669-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 22, 2024 https://www.debian.org/security/faq -...

The vulnerability of the Layer 2 Address Learning Daemon (L2ALD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

OESA-2024-1464 docker security update

Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking...

Denial Of Service (DoS)

FRRouting/frr is vulnerable to Denial of Service DoS. This vulnerability occurs due to improper handling of the Prefix SID attribute in the bgpattrmalformed function within bgpattr.c, leading to a crash of the bgpd daemon...