Lucene search
+L

84 matches found

Positive Technologies
Positive Technologies
added 2022/01/13 12:0 a.m.5 views

PT-2022-10381 · Openbsd · Openbsd Kernel

Name of the Vulnerable Software and Affected Versions: OpenBSD Kernel affected versions not specified Description: This issue allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged...

5.5CVSS6.8AI score0.00241EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/13 12:0 a.m.7 views

OpenBSD 安全漏洞

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. OpenBSD suffers from a security vulnerability that stems from the implementation of multicast routing that does not properly initialize memory before accessing it . The vulnerability allows...

5.5CVSS5.2AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/01/06 12:0 a.m.6 views

OpenBSD 信息泄露漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD project team. OpenBSD suffers from an information disclosure vulnerability that stems from an error in the implementation of multicast routing in the OpenBSD kernel. A local user can run a specially crafte...

3.3CVSS4.9AI score0.00248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/01/06 12:0 a.m.6 views

PT-2022-10382 · Openbsd · Openbsd Kernel

Name of the Vulnerable Software and Affected Versions: OpenBSD Kernel affected versions not specified Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target...

3.3CVSS7AI score0.00248EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:0 a.m.21 views

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

3.3CVSS4.7AI score0.00248EPSS
SaveExploits0
OSV
OSV
added 2021/07/15 8:15 p.m.6 views

CVE-2021-0295

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

6.1CVSS5.8AI score0.01097EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/15 8:1 p.m.67 views

CVE-2021-0295

The CVE-2021-0295 issue affects Juniper Networks Junos OS on QFX10K Series switches (e.g., QFX10002/10008/10016). It’s caused by DVMRP packets looping on a multi-homed ESI when VXLAN is configured, leading to a packet forwarding loop that triggers a partial DoS. Affected versions include multiple...

6.1CVSS6AI score0.01097EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/07/14 12:0 a.m.20 views

Juniper Junos OS Vulnerability (JSA11208)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11208 advisory. - A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet...

6.1CVSS6.3AI score0.01097EPSS
SaveExploits0References2
Virtuozzo
Virtuozzo
added 2021/02/05 12:0 a.m.92 views

[Important] [Security] Virtuozzo ReadyKernel patch 122.0 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernel 3.10.0-1127.18.2.vz7.163.46 Virtuozzo Hybrid Server 7.5. Vulnerability id: CVE-2020-29661 Incorrect locking in TTY subsystem could lead to use-after-free conditions and cause...

7.8CVSS7.9AI score0.01129EPSS
SaveExploits2References2
The Hacker News
The Hacker News
added 2020/09/30 4:49 p.m.67 views

Cisco Issues Patches For 2 High-Severity IOS XR Flaws Under Active Attacks

Cisco yesterday released security patches for two high-severity vulnerabilities affecting its IOS XR software that were found exploited in the wild a month ago. Tracked as CVE-2020-3566 and CVE-2020-3569, details for both zero-day unauthenticated DoS vulnerabilities were made public by Cisco late...

8.6CVSS1.1AI score0.03631EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2020/09/30 4:49 p.m.4 views

Cisco Issues Patches For 2 High-Severity IOS XR Flaws Under Active Attacks

Cisco yesterday released security patches for two high-severity vulnerabilities affecting its IOS XR software that were found exploited in the wild a month ago. Tracked as CVE-2020-3566 and CVE-2020-3569 , details for both zero-day unauthenticated DoS vulnerabilities were made public by Cisco lat...

8.6CVSS7.4AI score0.03631EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/09/16 12:0 a.m.9 views

Huawei Data Communication: Read current-configuration configuration section include multicast routing-enable

Get the sections with multicast routing-enable of the VRP device. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/09/16 12:0 a.m.15 views

Huawei Data Communication: Read current-configuration configuration section include multicast routing-enable

Get the sections with multicast routing-enable of the VRP device. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/09/03 12:0 a.m.5 views

The vulnerability of the Distance Vector Multicast Routing Protocol (DVMRP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Distance Vector Multicast Routing Protocol DVMRP implementation in the Cisco IOS XR operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

8.6CVSS7.5AI score0.03631EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/09/01 12:0 a.m.46 views

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities (cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz)

According to its self-reported configuration, Cisco IOS XR Software is affected by multiple vulnerabilities: - Multiple denial of service DoS vulnerabilities exist in the Distance Vector Multicast Routing Protocol DVMRP feature due to insufficient queue management for Internet Group Management...

8.6CVSS7.8AI score0.03631EPSS
SaveExploits0References5
NCSC
NCSC
added 2020/08/31 12:0 a.m.8 views

Vulnerability fixed in Cisco IOS XR

Cisco has fixed a vulnerability in the Distance Vector Multicast Routing Protocol DVMRP functionality in IOS XR. The vulnerability allows an unauthenticated remote malicious person able to cause a Denial-of-Service on the vulnerable device. To do so, the malicious party needs to send rogue IGMP...

8.6CVSS6.8AI score0.03631EPSS
SaveExploits0
CISA
CISA
added 2020/08/31 12:0 a.m.37 views

Cisco Releases Security Advisory for DVMRP Vulnerability in IOS XR Software

Cisco has released a security advisory on a vulnerability—CVE-2020-3566—in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR software. This vulnerability affects Cisco devices running IOS XR software that have an active interface configured under multicast routing. A...

7.8CVSS7.2AI score0.03631EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/08/29 3:0 a.m.40 views

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol IGMP process or make it consume available memory and eventually cras...

8.6CVSS8.4AI score
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2020/08/29 12:0 a.m.6 views

VulnCheck KEV: CVE-2020-3566

Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...

8.6CVSS7.3AI score0.03631EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/08/26 12:0 a.m.2 views

PT-2020-3783 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to the incorrect handling of IGMP packets in the Distance Vector Multicast Routing Protocol DVMRP feature, which could allow an unauthenticated, remote...

8.6CVSS6.8AI score0.03293EPSS
SaveExploits0References11
Rows per page
Query Builder