490 matches found
CVE-2020-10664
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...
CVE-2020-10664
Affected product/component: Wind River VxWorks 6.8.3 IPNET (IGMP component) with CVE patches created in 2019. Vulnerability: NULL pointer dereference in the IGMP code path. Impact (as stated): Availability impact of the vulnerable component is reported as HIGH (CVSS‑3.1) and PARTIAL (CVSS‑2.0) wi...
CVE-2020-10664
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A divide-by-zero flaw was found in the Linux kernel's igmpheardquery function. An attacker able to send certain IGMP Internet Group Management Protocol packets to a target system could use this flaw to cause a denial of service...
NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2
NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2 This article describes a problem in which Network Load Balancing NLB cluster communication gets interrupted randomly in Windows Server 2012 R2. An update is available to fix thi...
The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.
The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...
Cisco IOS XE Software Internet Group Management Protocol Memory Leak (cisco-sa-20180328-igmp)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality. An unauthenticated, adjacent attacker can exploit this, by sending a large number of IGMP Membership...
CVE-2019-13270
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
CVE-2019-13264
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
CVE-2019-13267
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...
Design/Logic Flaw
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
Design/Logic Flaw
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...
Design/Logic Flaw
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
CVE-2019-13264
CVE-2019-13264 affects D-Link DIR-825AC G1 devices, exposing cross-network data flow between host and guest networks within the same device. The root cause is insufficient isolation, enabling data transfer via the IGMP Group IP field when a sender joins and leaves an IGMP group; the router then b...
CVE-2019-13264
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
CVE-2019-13267
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...
CVE-2019-13267
The CVE-2019-13267 entry concerns TP-Link Archer C3200 V1 and Archer C2 V1 routers with insufficient isolation between host and guest networks on the same device. The root cause is a mechanism where, during IGMP group joins/leaves, the router creates an IGMP Membership Query using the Group IP, s...
CVE-2019-13270
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
CVE-2019-13270
Edimax BR-6208AC V1 devices are affected by a cross-router covert-channel vulnerability where insufficient isolation between host and guest networks allows data to be transferred within the Group IP field of an IGMP packet. The vulnerability arises from withingroup communication enabled by the se...
