CVE-2023-24513 On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options this may cause a recomputation of the TCP checksum ...

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually st...

PT-2023-19660 · Arista · Arista Cloudeos

Name of the Vulnerable Software and Affected Versions: Arista CloudEOS affected versions not specified Description: The issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch, causing a leak of packet buffers. If...

PT-2023-3059 · Juniper Networks · Qfx10000 Series +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

CVE-2023-24545 On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch.

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually st...

PT-2023-2577 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 on QFX Series Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S7 on QFX Series Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S6 on QFX Series Juniper Networks Junos OS...

PT-2023-19682 · Arista · Arista Cloudeos

Name of the Vulnerable Software and Affected Versions: Arista CloudEOS affected versions not specified Description: The issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch, causing a leak of packet buffers. If...

CVE-2023-24513

CVE-2023-24513 affects Arista CloudEOS Sfe in multiple CloudEOS trains. The issue is a size-check bypass in the Software Forwarding Engine that can lead to buffer over-reads and, depending on options, TCP checksum recomputation, potentially enabling DoS via malformed packets and packet-buffer lea...

Arista Networks CloudEOS 缓冲区错误漏洞

Arista Networks CloudEOS is a new platform version of EOS Arista Networks Extensible Operating System that supports Amazon Web Service AWS, Microsoft Azure and other public clouds. A security vulnerability exists in Arista Networks CloudEOS, which stems from a size-check bypass issue in the...

Siemens SCALANCE X Expected Behavior Violation (CVE-2019-6569)

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime...

Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection DoS (cisco-sa-bfd-XmRescbT)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2023-0494

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...

CVE-2023-0494

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...

CVE-2023-0494

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2023-1569)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2023-1544)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...

CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

Vulnerabilities fixed in Cisco IOS XR

Cisco has fixed vulnerabilities in IOS XR, as used in ASR series 9000 routers. An unauthenticated remote malicious person could remote can exploit the vulnerability with attribute CVE-2023-20049 to cause a denial-of-service DoS by sending rogue BFD packets. BFD is Bidirectional Forwarding...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2023:0655-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0655-1 advisory. - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874. Tenable has extracted the preceding description block...

CVE-2023-20049

A vulnerability in the bidirectional forwarding detection BFD hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote...

Cisco ASR 9000 Series 缓冲区错误漏洞

Cisco IOS and others are products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco ASR 900 is a 900 Series Aggregation Services Router.Cisco ASR 9000 is a 9000 Series Aggregation Services Router. A security vulnerability exists in the Cisco ASR 9000...