Lucene search
+L

2546 matches found

Cvelist
Cvelist
•added 2017/10/13 5:00 p.m.•48 views

CVE-2017-10619 Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets

When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...

7.5CVSS7.4AI score0.01296EPSS
SaveExploits0References1
CVE
CVE
•added 2017/10/13 5:00 p.m.•80 views

CVE-2017-10619

Summary (CVE-2017-10619) : In Juniper Networks Junos OS, when the Express Path (service offloading) feature is configured on SRX1400/SRX3400/SRX3600/SRX5400/SRX5600/SRX5800 in HA cluster mode, certain multicast packets can cause the flowd process to crash. This can halt or interrupt traffic and t...

7.5CVSS7.4AI score0.01296EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/13 12:00 a.m.•9 views

CVE-2017-10619: Undefined Security Weakness

When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...

7.5CVSS7.2AI score0.01296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/10/13 12:00 a.m.•7 views

PT-2017-11414

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D45 Junos OS versions prior to 15.1X49-D80 Description The issue occurs when Express Path is configured on certain Juniper Networks SRX devices in high availability cluster configuration mode, causing the flo...

7.5CVSS0.01296EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2017/09/14 6:29 a.m.•10 views

DEBIAN-CVE-2017-13030

The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...

9.8CVSS7.5AI score0.03428EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2017/09/14 6:29 a.m.•22 views

DEBIAN-CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

9.8CVSS7.5AI score0.03241EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/09/14 12:00 a.m.•9 views

Tcpdump PGM parser buffer overflow vulnerability (CNVD-2017-28275)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PGM parser is one of the transport layer multicast protocol parsers. A...

9.8CVSS9.4AI score0.03241EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/09/14 12:00 a.m.•13 views

Tcpdump PIM Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PIM parser is one of the PIM multicast protocol parsers. A buffer...

9.8CVSS9.4AI score0.03428EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2017/09/13 12:00 a.m.•19 views

UBUNTU-CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

9.8CVSS7AI score0.03241EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/09/10 12:00 a.m.•7 views

PT-2017-12886

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode multicast vpn function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version 4.9....

9.8CVSS0.05504EPSS
SaveExploits2References277
CNVD
CNVD
•added 2017/08/31 12:00 a.m.•32 views

Wireshark MSDP Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the Wireshark MSDP parser allows an attacker to exploit the vulnerability to submit a special request for a denial-of-service attack...

7.8CVSS7.5AI score0.01977EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2017/08/30 9:29 a.m.•11 views

UBUNTU-CVE-2017-13767

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation...

7.5CVSS7.1AI score0.01977EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2017/08/30 12:00 a.m.•38 views

SUSE SLES12 Security Update : quagga (SUSE-SU-2017:2294-1)

This update provides Quagga 1.1.1, which brings several fixes and enhancements. Security issues fixed : - CVE-2017-5495: Telnet 'vty' interface DoS due to unbounded memory allocation. bsc1021669 - CVE-2016-1245: Stack overrun in IPv6 RA receive code. bsc1005258 Bug fixes : - Do not enable zebra's...

9.8CVSS7.3AI score0.18803EPSS
SaveExploits0References8
NVD
NVD
•added 2017/08/18 6:29 p.m.•31 views

CVE-2017-8256

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses...

7.8CVSS7.4AI score0.00381EPSS
SaveExploits0References2
Prion
Prion
•added 2017/08/18 6:29 p.m.•23 views

Design/Logic Flaw

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses...

6.8CVSS7.9AI score0.00381EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/18 12:00 a.m.•9 views

CVE-2017-8256: Out-of-bounds Read

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses...

7.8CVSS5.9AI score0.00381EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/08/18 12:00 a.m.•4 views

PT-2017-18239

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when userspace sends more than 16 multicast addresses, leading to an array out of bounds access. Recommendatio...

7.8CVSS0.00381EPSS
SaveExploits0References3
Prion
Prion
•added 2017/07/10 8:29 p.m.•30 views

Design/Logic Flaw

A vulnerability in Multicast Source Discovery Protocol MSDP ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service DoS condition. The MSDP session will restart within...

5CVSS7.4AI score0.01589EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2017/07/10 8:29 p.m.•18 views

CVE-2017-6731

A vulnerability in Multicast Source Discovery Protocol MSDP ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service DoS condition. The MSDP session will restart within...

7.5CVSS5.8AI score0.01589EPSS
SaveExploits0References2
CVE
CVE
•added 2017/07/10 8:00 p.m.•76 views

CVE-2017-6731

CVE-2017-6731 affects Cisco IOS XR Software in the Multicast Source Discovery Protocol (MSDP) ingress packet processing. An unauthenticated, remote attacker can trigger a short DoS by sending malformed MSDP packets to an established MSDP session, causing the session to reset and restart within se...

7.5CVSS7.4AI score0.01589EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder