Lucene search
+L

650 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/18 12:0 a.m.3 views

Cisco IOS XR Software Border Gateway Protocol Confederation DoS (cisco-sa-iosxr-bgp-dos-O7stePhX)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in confederation implementation for the Border Gateway Protocol BGPin Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This...

8.6CVSS8.6AI score0.00922EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/03/17 12:0 a.m.11 views

The vulnerability of the routing protocol BGP implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the BGP routing protocol implementation in Cisco IOS XR operating systems lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted BGP reques...

8.6CVSS8.2AI score0.00922EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/03/12 4:15 p.m.6 views

CVE-2025-20115

A vulnerability in confederation implementation for the Border Gateway Protocol BGP in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to a memory corruption that occurs when a BGP update is created with a...

8.6CVSS5.8AI score0.00922EPSS
Exploits0References2
NVD
NVD
added 2025/03/12 4:15 p.m.14 views

CVE-2025-20115

A vulnerability in confederation implementation for the Border Gateway Protocol BGP in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to a memory corruption that occurs when a BGP update is created with a...

8.6CVSS0.00922EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.5 views

Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista, USA. A security vulnerability exists in Arista EOS that stems from a BGP memory leak that could result in the termination of route processing...

5.3CVSS6.7AI score0.00334EPSS
Exploits0References2
OSV
OSV
added 2025/02/05 4:15 p.m.8 views

CVE-2024-39564

This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to...

8.7CVSS5.8AI score0.00404EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/05 12:0 a.m.6 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 资源管理错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

8.7CVSS6.7AI score0.00404EPSS
Exploits0References1
OSV
OSV
added 2025/01/30 7:26 p.m.6 views

CLSA-2025-1738265190 Fix CVE(s): CVE-2024-44070

SECURITY UPDATE: Improper handling of TLV values in bgpattrencap - debian/patches/CVE-2024-44070.patch: check actual remaining stream length before taking TLV value - CVE-2024-44070...

9.8CVSS7.2AI score0.00641EPSS
Exploits0References1
OSV
OSV
added 2025/01/27 4:2 p.m.4 views

USN-7230-2 frr vulnerabilities

Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2024-44070 It was discovered that FRR re-validated all routes in...

9.8CVSS7.3AI score0.00837EPSS
Exploits0References3
OSV
OSV
added 2025/01/27 4:2 p.m.5 views

USN-7230-1 quagga vulnerability

Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service...

9.8CVSS7.2AI score0.00641EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.7 views

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by...

6.5CVSS5.4AI score0.00231EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.6 views

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by sending...

6.5CVSS5.4AI score0.00237EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.5 views

The vulnerability of demons that implement routing protocols (rpd) in Junos OS and Junos OS Evolved allows a attacker to cause a service failure.

The vulnerability of demons that implement routing protocols for Junos OS and Junos OS Evolved is related to reading memory outside of the allowed range. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending specially crafted BGP packets remotely...

7.8CVSS5.4AI score0.00714EPSS
Exploits0References4Affected Software2
NCSC
NCSC
added 2025/01/10 12:14 p.m.7 views

Vulnerabilities fixed in Juniper JunOS

Juniper has fixed vulnerabilities in JunS Specifically JunOS and JunOS Evolved. The vulnerabilities are in the way Juniper's JunOS and JunOS Evolved handle BGP packets and IPv6 packets. The first vulnerability can be exploited by unauthenticated attackers sending distorted BGP packets, which can...

8.7CVSS7.2AI score0.00714EPSS
Exploits0References2
OSV
OSV
added 2025/01/09 7:15 p.m.5 views

CVE-2025-21598

An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon rpd allows an unauthenticated, network-based attacker to send malformed BGP packets to a device configured with packet receive trace options enabled to crash rpd. This issue affects:...

8.2CVSS5.8AI score0.00714EPSS
Exploits0References2
OSV
OSV
added 2025/01/09 5:15 p.m.7 views

CVE-2025-21593

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

7.1CVSS5.8AI score0.00231EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.6 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

7.1CVSS6.6AI score0.00231EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.8 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 缓冲区错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a suite of network operating systems dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

8.2CVSS7AI score0.00714EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.6 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 缓冲区错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a suite of network operating systems dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

7.1CVSS6.9AI score0.00237EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/08 12:0 a.m.8 views

PT-2025-1071

Name of the Vulnerable Software and Affected Versions Junos OS versions 21.4 through 24.2R1-S2, 24.2R2 Junos OS Evolved versions 21.4-EVO through 24.2-EVO Description The issue is related to an Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and...

7.1CVSS5.9AI score0.00237EPSS
Exploits0References8
Rows per page
Query Builder