Lucene search
+L

805 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.8 views

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router’s microprogramming system is caused by a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...

6.5CVSS7.5AI score0.00951EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:0 a.m.8 views

The vulnerability of the DHCP service provided by microprogramming software for controllers such as APOGEE MBC, APOGEE MEC, APOGEE PXC, Desigo PXC, TALON TC, and the operating system Nucleus allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP service provided by microprogramming software for controllers such as APOGEE MBC, APOGEE MEC, APOGEE PXC, Desigo PXC, TALON TC, and the operating system Nucleus lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicio...

7.8CVSS7.4AI score0.01477EPSS
SaveExploits0References7Affected Software20
BDU FSTEC
BDU FSTEC
added 2023/06/23 12:0 a.m.6 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the DHCP server service for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

5.3CVSS6.9AI score0.01328EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/14 12:15 a.m.4 views

CVE-2023-29355

DHCP Server Service Information Disclosure Vulnerability...

5.3CVSS6.8AI score0.01328EPSS
SaveExploits0References2Affected Software9
OSV
OSV
added 2023/06/14 12:15 a.m.2 views

CVE-2023-29355

DHCP Server Service Information Disclosure Vulnerability...

5.3CVSS7.3AI score0.01328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.3 views

PT-2023-3215 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The issue is related to an information disclosure vulnerability in the DHCP Server Service of Windows operating systems. This vulnerability can be exploited by a remote...

5.3CVSS8.9AI score0.01328EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/06/05 12:0 a.m.11 views

Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS, which stems from the fact that an incorrectly formatted DHCP packet may cause the DHCP relay agent to restart...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/01 2:27 p.m.7 views

CLSA-2023-1685629665 dhcp: Fix of 2 CVEs

CVE-2022-2928: option refcount overflow when leasequery is enabled leading to dhcpd abort - CVE-2022-2929: DHCP memory leak - Backported tests from upstream, for this and other CVEs...

6.5CVSS6.8AI score0.00682EPSS
SaveExploits0References1
NCSC
NCSC
added 2023/06/01 12:0 a.m.7 views

Vulnerability fixed in Arista series 7000 switches

Arista has fixed a vulnerability in the EOS software of several Series 7000 switches. A malicious party can exploit abuse the vulnerability to use a manipulated DHCP packet to crash and restart the DHCP relay service to crash and restart, thus creating a partial Denial-of-Service can occur. Arist...

7.5CVSS6.9AI score0.00616EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2023/05/31 3:0 p.m.4 views

CVE-2023-24510

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

7.5CVSS5.9AI score0.00616EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/18 12:0 a.m.7 views

PT-2023-3796 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 US AC6V1.0BR V15.03.05.19 Description: A critical vulnerability was found in the function fromDhcpListClient, which leads to a stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the...

9.8CVSS8AI score0.00951EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2023/05/16 8:42 a.m.48 views

Moderate: Red Hat Security Advisory: dhcp security and bug fix update

An update for dhcp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

6.5CVSS6.8AI score0.00682EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/09 9:51 a.m.7 views

dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort

An integer overflow vulnerability was found in the DHCP server. When the "optioncodehashlookup" function is called from "addoption", it increases the option's "refcount" field. However, there is not a corresponding call to "optiondereference" to decrement the "refcount" field. The "addoption"...

6.5CVSS7.4AI score0.00682EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/05/09 9:51 a.m.4 views

dhcp: DHCP memory leak

A vulnerability was found in the DHCP server where the "fqdnuniversedecode" function allocates buffer space for the contents of option 81 fqdn data received in a DHCP packet. The maximum length of a DNS "label" is 63 bytes. The function tests the length byte of each label contained in the "fqdn";...

6.5CVSS7.4AI score0.00637EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.11 views

The vulnerability of the DHCPv6 protocol implementation in Cisco IOS XE and Cisco IOS systems allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the DHCPv6 protocol implementation in Cisco IOS XE and Cisco IOS lies in unvalidated array indexing. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure by sending specially crafted DHCPv6 messages...

8.6CVSS7.2AI score0.00951EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/02 12:0 a.m.7 views

The vulnerability of the DHCP implementation in the software-based quadcopter DJI Spark protocol allows a perpetrator to cause service failure.

The vulnerability of the DHCP implementation in DJI Spark quadrocopters’ software lies in the exhaustion of the IP address pool due to changes in the security-critical protection mechanism. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafte...

9.1CVSS6.2AI score0.00908EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/03/27 9:15 p.m.6 views

CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

5.9CVSS5.8AI score0.00908EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/27 9:15 p.m.7 views

CVE-2022-46416

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

5.9CVSS5.8AI score0.00875EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/23 5:15 p.m.4 views

CVE-2023-20081

A vulnerability in the IPv6 DHCP DHCPv6 client module of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

5.9CVSS6.2AI score0.00678EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.13 views

Cisco Adaptive Security Appliances Software 缓冲区错误漏洞

Cisco Adaptive Security Appliances Software ASA Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides features such as highly secure access to data and network resources. A security vulnerability exists in Cisco Adaptive Security...

6.8CVSS6AI score0.00678EPSS
SaveExploits0References2
Rows per page
Query Builder