Design/Logic Flaw

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

Junos OS Firewall Filters Failure Vulnerability (JSA10942)

The version of Junos OS installed on the remote host is EX3400 Series running Junos OS prior to 14.1X53-D115, 17.1R3, 17.2R3-S2, 17.3R3-S3, 17.4R2-S5, 18.1R3-S1, 18.2R2, or 18.3R2. It is, therefore, affected by a vulnerability. When a firewall filter is applied on the loopback interface, other...

CVE-2019-0048

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...

Design/Logic Flaw

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...

CVE-2019-0048 EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...

CVE-2019-0048

CVE-2019-0048 affects Juniper Networks Junos OS on the EX4300 Series. Root cause: with TCAM optimization enabled, an implicit loopback filter rule (high priority) meant for 224.0.0.x incorrectly matches 224.x.x.x, causing multicast firewall behavior to break when a filter is applied on the loopba...

Cisco IOS Software Sup2T Denial of Service Vulnerability

A vulnerability in Cisco Catalyst 6500 Supervisor Engine 2T Sup2T could allow an unauthenticated, remote attacker to crash the device. The vulnerability is due to incorrect processing multicast traffic by the Sup2T. An attacker could exploit this vulnerability by sending crafted packets to the...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities: Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability Cisco IOS XE Software MVPNv6 Traffic Denial of Service Vulnerability Cisco IOS XE...

CVE-2010-4691

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

CVE-2010-4691

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

CVE-2010-4674

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allows remote attackers to cause a denial of service block exhaustion via multicast traffic, aka Bug ID CSCtg63992...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allows remote attackers to cause a denial of service block exhaustion via multicast traffic, aka Bug ID CSCtg63992...

CVE-2010-4674

CVE-2010-4674 affects Cisco ASA 5500 series devices running software 8.2(4) and earlier. The vulnerability allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic (Bug ID CSCtg63992). Impact details are conveyed across sources: affected product is ASA 5500 se...

CVE-2010-4674

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allows remote attackers to cause a denial of service block exhaustion via multicast traffic, aka Bug ID CSCtg63992...

PT-2011-1646 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.32 Description: The issue allows remote attackers to cause a denial of service, resulting in a device crash, via multicast traffic. Recommendations: For versions...

PT-2011-1629 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices version 8.24 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically block exhaustion, via multicast traffic. Recommendations: For versio...

CVE-2005-4766

CVE-2005-4766 affects BEA WebLogic Server and WebLogic Express; versions 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic. The root cause is lack of encryption for multicast communications, which could allow an attacker to read sensitive cluster synchronization messa...

CVE-2005-4766

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic...