Design/Logic Flaw

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...

CVE-2019-6681

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...

CVE-2019-6681

CVE-2019-6681 affects BIG-IP tmrouted with memory leak in the Multicast Forwarding Cache (MFC). Affected versions include BIG-IP 15.0.0–15.0.1.1, 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, and 12.1.0–12.1.5. The vulnerability can cause a memory leak in tmrouted, potentially exhausting system ...

Buffer overflow

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wmaprocessbip, buffer overflow will happen in both cdsismmievalid and qdfnbuftrimtail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2018-11980

The CVE-2018-11980 issue is a buffer overflow in Qualcomm/Snapdragon WLAN host code caused by a missing length check in wma_process_bip when handling a fake 11w multicast rmf without mmie. Affected are Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra...

Heap corruption vulnerability in Xiaomi AI Speaker-mDNS service

Xiaomi AI Speaker is a smart speaker product from Xiaomi. A heap corruption vulnerability exists in the Xiaomi AI Speaker-mDNS service. The vulnerability is due to the program service in the parsing of the request message there is a boundary check is not strict, resulting in the arbitrary write o...

Xiaomi AI Speaker-mDNS service suffers from denial of service vulnerability

Xiaomi AI Speaker is a smart speaker product from Xiaomi. A denial of service vulnerability exists in the Xiaomi AI Speaker-mDNS service. The vulnerability is caused by the program service failing to adequately determine malformed messages when parsing request messages, causing the parsing thread...

Junos OS: Multicast flowd DoS (JSA10968)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the flowd process. An unauthenticated, remote attacker can exploit this issue, by repeatedly sending specific multicast packets to an affected device, to cause the device to stop...

Junos OS: srxpfe PIM DoS (JSA10976)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices. An unauthenticated, remote attacker can exploit this issue, by repeatedly...

The vulnerability of the srxpfe process in the JunOS operating system’s SRX Series network interfaces allows a attacker to trigger a service failure.

The vulnerability of the srxpfe process in the JunOS operating system’s SRX Series network interfaces is related to errors in processing PIM messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Next-Generation Multicast VPN (NG-mVPN) service in the Junos OS allows a attacker to cause a service failure.

The vulnerability of the Next-Generation Multicast VPN NG-mVPN service in the Junos OS operating system is related to the lack of data validation during transmission. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IPv4 packets...

CVE-2019-0075

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

CVE-2019-0068

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

CVE-2019-0066

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

CVE-2019-0068

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

Denial of service

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

CVE-2019-0075

The CVE-2019-0075 issue affects Juniper Networks Junos OS on SRX Series, specifically the srxpfe process when handling Protocol Independent Multicast (PIM) messages. A vulnerable state can cause the srxpfe process to crash and trigger an FPC reboot, potentially leading to an extended denial-of-se...

CVE-2019-0066

CVE-2019-0066 affects Juniper Junos OS NG-mVPN: an unexpected status return value in the NG-mVPN service can be triggered by a crafted malformed IPv4 packet, allowing an unauthenticated remote attacker to cause a Denial of Service by core-dumping the routing protocol daemon (rpd). Impact is a DoS...

CVE-2019-0068

CVE-2019-0068 affects Juniper Networks Junos OS on SRX Series, where the SRX flowd process may crash and restart when handling specific multicast packets. A remote, unauthenticated attacker can trigger a sustained Denial of Service by repeatedly sending the crafted multicast traffic, causing the ...

CVE-2019-0068 Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...