CentOS 7 : avahi (RHSA-2020:1176)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1176 advisory. - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote...

NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2

NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2 This article describes a problem in which Network Load Balancing NLB cluster communication gets interrupted randomly in Windows Server 2012 R2. An update is available to fix thi...

CVE-2020-1634

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

Design/Logic Flaw

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

avahi security update

CentOS Errata and Security Advisory CESA-2020:1176 An update for avahi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CVE-2020-1634: Integer Overflow or Wraparound

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

PT-2020-4095

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 12.3X48-D80 through 12.3X48-D95 on High-End SRX Series Description: The issue affects High-End SRX Series devices, in specific configurations, and when specific networking events or operator actions occur, a...

avahi security update

0.6.31-20 - multicast DNS no longer responds to unicast queries outside of local network 1663410...

RHEL 7 : avahi (RHSA-2020:1176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1176 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service...

Low: Red Hat Security Advisory: avahi security update

An update for avahi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Videolabs libmicrodns code issue vulnerability

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. A security vulnerability exists in the message parsing functionality of Videolabs libmicrodns version 0.1.0, which stems from the program not checking the return value of the 'mdnsreadheader'...

Junos OS Firewall Filters Failure Vulnerability (JSA10942)

The version of Junos OS installed on the remote host is EX3400 Series running Junos OS prior to 14.1X53-D115, 17.1R3, 17.2R3-S2, 17.3R3-S3, 17.4R2-S5, 18.1R3-S1, 18.2R2, or 18.3R2. It is, therefore, affected by a vulnerability. When a firewall filter is applied on the loopback interface, other...

Videolabs libmicrodns Denial of Service Vulnerability

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. A security vulnerability exists in the resource record parsing feature of Videolabs libmicrodns version 0.1.0, which is caused by the program using compressed pointers without recursive checking...

Videolabs libmicrodns resource management error vulnerability (CNVD-2020-19846)

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. A resource management error exists in resource allocation handling in Videolabs libmicrodns version 0.1.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk space,...

Videolabs libmicrodns Resource Management Error Vulnerability

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. A security vulnerability in the label parsing feature in Videolabs libmicrodns version 0.1.0 stems from the program failing to check the return value of the 'rrdecode' function when parsing...

DEBIAN-CVE-2020-6071

An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attacker can...

DEBIAN-CVE-2020-6078

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdnsrecv, the return value of the mdnsreadheader function is not checked, leading to an uninitialized variable usage that eventually results in ...

DEBIAN-CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

DEBIAN-CVE-2020-6080

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...