CVE-2020-11896

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

CVE-2020-11896

CVE-2020-11896 affects the Treck TCP/IP stack prior to version 6.0.1.66 and enables Remote Code Execution via IPv4 tunneling. The Ripple20 set documents multiple vulnerabilities in this stack; a PoC exploit exists (e.g., Digi Connect ME 9210). Connected advisories (Cisco, Fortinet, F5, others) di...

CVE-2020-11896: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

Cisco Firepower Threat Defense Software Packet Flood DoS (cisco-sa-ftd-dos-N2vQZASR)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a denial of service DoS vulnerability in the packet processing functionality due to inefficient memory management. An unauthenticated, remote attacker can exploit this vulnerability by sending a hig...

PT-2020-5943

Name of the Vulnerable Software and Affected Versions: Treck TCP/IP stack versions prior to 6.0.1.66 Description: The issue is related to the improper handling of an IPv4/ICMPv4 Length Parameter Inconsistency in the Treck TCP/IP stack, which might allow remote attackers to trigger an information...

CVE-2020-11909: Integer Underflow (Wrap or Wraparound)

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow...

CVE-2020-11898: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak...

PT-2020-5942

Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66 Description A vulnerability exists in the implementation of IPv4 tunneling within the Treck TCP/IP stack due to insufficient input validation. Exploitation of this issue may allow a remote attacker...

PT-2020-5471

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.5.10 Python versions prior to 3.6.12 Python versions prior to 3.7.9 Python versions prior to 3.8.4 Python versions prior to 3.9.0 Description The issue is related to the improper computation of hash values in the...

CVE-2020-11900: Double Free

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

Treck TCP/IP (Update I)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Treck Inc. Equipment : TCP/IP Vulnerabilities : Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or...

PT-2020-6617

Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66 Description The issue is related to insufficient input validation in the implementation of the IPv4 protocol stack. This can allow a remote attacker to gain unauthorized access to protected...

CVE-2020-13817

A high-performance ntpd instance that gets its time from unauthenticated IPv4 time sources may be vulnerable to an off-path attacker who can query time from the victim's ntpd instance. An attacker who can send a large number of packets with the spoofed IPv4 address of the upstream server can use...

Huawei Data Communication: FragmentSmack Vulnerability in Linux Kernel (huawei-sa-20190123-01-linux)

There is a DoS vulnerability in the Linux Kernel versions 3.9+ known as a FragmentSmack attack. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-13817

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

CVE-2020-13817

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

Design/Logic Flaw

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

CVE-2020-13817

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

CVE-2020-13817: Use of Insufficiently Random Values

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

Huawei Data Communication: Deploying IPv4 PIM Register-Policy

To prevent attacks from invalid REGISTER requests, you can configure a packet filtering policy to reject the REGISTER requests that do not match the policy. Configure the ACL referenced by the policy to permit the multicast source to send Register messages. SPDX-FileCopyrightText: 2020 Greenbone ...