Cisco NX-OS Software 输入验证错误漏洞

Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the Protocol Independent Multicast PIM feature of the Cisco NX-OS, which can be exploited by a...

[Important] [Security] Virtuozzo ReadyKernel patch 122.0 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernel 3.10.0-1127.18.2.vz7.163.46 Virtuozzo Hybrid Server 7.5. Vulnerability id: CVE-2020-29661 Incorrect locking in TTY subsystem could lead to use-after-free conditions and cause...

CVE-2021-1268

A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause an IPv6 flood on the management interface network of an affected device. The vulnerability exists because the software incorrectly forward...

Cisco IOS XR 安全漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in Cisco IOS XR's IPv6 protocol processing. The vulnerability stems from the software not properly forwarding IPv6 packets that have an IPv6 no...

Vulnerability fixed in Juniper QFX switches

Juniper has fixed a vulnerability in Junos OS for network switches in the QFX10K series. A remote malicious party could potentially exploit the vulnerability to cause a denial-of-service cause. To do so, rogue multicast network traffic should be sent to the vulnerable switch be sent. Juniper has...

Design/Logic Flaw

In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address VGA is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately leading to a Denial of Service DoS in...

CVE-2021-0221 Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic

In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address VGA is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately leading to a Denial of Service DoS in...

CVE-2021-0221

In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address VGA is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately leading to a Denial of Service DoS in...

Juniper Networks Junos OS QFX Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS QFX, which can be exploited by an attacker to trigger a denial of service via ...

Huawei CloudEngine Buffer Error Vulnerability

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. A buffer error vulnerability exists in Huawei...

PT-2020-15009 · Fnet · Fnet

Name of the Vulnerable Software and Affected Versions: FNET versions through 4.6.4 Description: An issue was discovered in the code for processing the hostname from an LLMNR request, which doesn't check for '0' termination. This may lead to Information Disclosure in fnet llmnr poll in fnet llmnr....

PT-2020-15721 · Fnet · Fnet

Name of the Vulnerable Software and Affected Versions: FNET versions through 4.6.4 Description: An issue was discovered in the code for processing resource records in mDNS queries, which doesn't check for proper '0' termination of the resource record name string, leading to an out-of-bounds read,...

CVE-2020-26966

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

UBUNTU-CVE-2020-26966

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

FNET Buffer Error Vulnerability

FNET is a soft armor from the FNET organization that provides dual TCP / IPv4 and IPv6 stack support for 32-bit MCUs. FNET suffers from a buffer error vulnerability that stems from resolving link-local multicast name resolution LLMNR requests without checking if the domain name terminates with...

Mozilla FireFox Information Disclosure Vulnerability (CNVD-2021-04827)

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. FireFox Windows suffers from an information disclosure vulnerability that originates from searching for a single word from the address bar resulting in an mDNS request being...

Mozilla Firefox 安全漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. FireFox Windows suffers from an information disclosure vulnerability that originates from searching for a single word from the address bar resulting in an mDNS request being...

Amazon Linux 2 : avahi (ALAS-2020-1502)

The version of avahi installed on the remote host is prior to 0.6.31-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1502 advisory. avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not...

CVE-2020-1668

On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load...

CVE-2020-1668

On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load...