PT-2022-15283

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.4R2-S10 Junos OS versions prior to 18.4R3-S10 Junos OS versions prior to 19.1R3-S7 Junos OS versions prior to 19.2R1-S8 Junos OS versions prior to 19.2R3-S4 Junos OS versions prior to 19.3R3-S5 Junos OS versions...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2022-06682)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Networks Junos OS, which could be exploited by an attacker to cause a...

CVE-2021-45485

An information leak flaw was found in the Linux kernel’s IPv6 implementation in the ipv6selectident in net/ipv6/outputcore.c function. The use of a small hash table in IP ID generation allows a remote attacker to reveal sensitive information. Mitigation Mitigation for this issue is either not...

CVE-2022-22174

A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service DoS condition. Once the condition occurs, further packet processin...

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in the Juniper Networks Junos OS, which arises from an uncontrolled...

Juniper Networks Junos OS 代码问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Networks Junos OS, which could be exploited by an attacker to cause a...

PT-2022-1474 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on ACX5448 versions 18.4 through 18.4R3-S10 Juniper Networks Junos OS on ACX5448 versions 19.1 through 19.1R3-S5 Juniper Networks Junos OS on ACX5448 versions 19.2 through 19.2R1-S8 Juniper Networks Junos OS on ACX54...

PT-2022-1472

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5000 Series and EX4600 versions prior to 18.3R3-S6 Juniper Networks Junos OS on QFX5000 Series and EX4600 versions prior to 18.4R2-S9 Juniper Networks Junos OS on QFX5000 Series and EX4600 versions prior to...

Juniper Junos OS Vulnerability (JSA11286)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11286 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA...

openSUSE 15 Security Update : kernel (openSUSE-SU-2022:0056-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0056-1 advisory. - Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated...

Juniper Junos OS Vulnerability (JSA11280)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11280 advisory. - A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading ...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.302.7.2 - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33699625 CVE-2021-4155 5.4.17-2136.302.7.1 - fget: check that the fd still exists after getting a ref to it Linus Torvalds Orabug: 33691332 CVE-2021-0920 5.4.17-2136.302.7 - rds: ib:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen

Detailed Report: https://oss-fuzz.com/testcase?key=6027003541716992 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60800004ad15 Crash State:...

pcapplusplus:FuzzTarget: Crash in pcpp::IPv6Extension::getExtensionLen

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5544125401792512 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)

uppy's companion module is vulnerable to Server-Side Request Forgery SSRF via IPv4-mapped IPv6 addresses...

GHSA-X8RQ-RC7X-5FG5 uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)

uppy's companion module is vulnerable to Server-Side Request Forgery SSRF via IPv4-mapped IPv6 addresses...

uriparser -- Multiple vulnerabilities

Upstream project reports: Fix a bug affecting both uriNormalizeSyntax and uriMakeOwner functions where the text range in .hostText would not be duped using malloc but remain unchanged and hence "not owned" for URIs with an IPv4 or IPv6 address hostname; depending on how an application uses...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLen

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5468403752632320 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

PT-2022-12970

Name of the Vulnerable Software and Affected Versions uppy affected versions not specified Description The issue is related to Server-Side Request Forgery SSRF, which allows an attacker to trick the server into making requests to unintended locations. This can be achieved via IPv4-mapped IPv6...

CVE-2021-30273

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...