Lucene search
+L

467 matches found

Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-31777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This is an automated ID intended to aid in discovery of potential security...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•1 views

PT-2022-32114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendatio...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•1 views

PT-2022-31981

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the ip gre module, where it tests csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-31202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.14 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This is an automated ID intended to aid in the discovery of potential securit...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-30852

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This potential security issue was introduced in version v5.15 and is fixed in versi...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•3 views

PT-2022-31521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendation...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/08 12:00 a.m.•3 views

PT-2025-8274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ip gre module, where the GRE protocol with TUNNEL CSUM applies local checksum offload on CHECKSUM PARTI...

7.1CVSS0.00281EPSS
SaveExploits0References28
Veracode
Veracode
•added 2022/01/26 5:22 a.m.•36 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists in grehandleoffloads of ipgre.c due to improper checks which allows an attacker to cause a buffer overflow that leads to an application crash...

5.5CVSS3.8AI score0.00178EPSS
SaveExploits0References3Affected Software2
osv_debian
osv_debian
•added 2022/01/14 8:15 p.m.•11 views

DEBIAN-CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS5.7AI score0.00178EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/14 8:15 p.m.•18 views

CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS6.3AI score0.00178EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/01/14 8:15 p.m.•14 views

UBUNTU-CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.8CVSS5.9AI score0.00178EPSS
SaveExploits0References4
osv_asb
osv_asb
•added 2022/01/01 12:00 a.m.•44 views

ASB-A-150694665

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00178EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2021/10/26 12:00 a.m.•17 views

October 26, 2021—KB5006745 (OS Build 20348.320) Preview

None None...

6.1AI score
SaveExploits0
Imperva Blog
Imperva Blog
•added 2021/10/11 6:08 p.m.•72 views

Learning how MTU and MSS work is key to using DDoS Protection as a Service

Maximum Transmit Unit MTU and Maximum Segment Size MSS are two important terms you should be familiar with when venturing into the world of networking, especially if you are working with GRE and IPSEC tunnels. And if you are looking to use DDoS Protection as a service, you will need to know how M...

0.2AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/09/23 3:15 a.m.•23 views

CVE-2021-1611

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

8.6CVSS5.8AI score0.01328EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/23 3:15 a.m.•29 views

CVE-2021-1611

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

8.6CVSS0.01328EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/23 3:15 a.m.•34 views

Design/Logic Flaw

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

5CVSS8.3AI score0.01328EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/09/23 2:30 a.m.•103 views

CVE-2021-1611

The CVE-2021-1611 issue affects Cisco IOS XE Wireless Controller Software on Catalyst 9800 Family/Embedded Wireless Controllers and Embedded Wireless on Catalyst 9000 Series switches, relating to Ethernet over GRE (EoGRE) packet processing. The root cause is improper handling of malformed EoGRE p...

8.6CVSS8.5AI score0.01328EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/09/22 4:00 p.m.•22 views

CVE-2021-1611

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

8.6CVSS7.7AI score0.01328EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/09/22 12:00 a.m.•3 views

PT-2021-5174

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software versions affected versions not specified Description A vulnerability in Ethernet over GRE EoGRE packet processing could allow an unauthenticated, remote attacker to cause a denial of service DoS...

8.6CVSS0.01328EPSS
SaveExploits0References7
Rows per page
Query Builder