Buffer overflow

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...

CVE-2020-24336

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...

CVE-2020-24336

CVE-2020-24336 affects Contiki (through v3.0) and Contiki-NG (through v4.5). The issue is in ip64-dns64.c DNS64 Type A domain-name parsing, where the code does not verify that the address length is sane. Copying an address of arbitrary length can cause a buffer overflow when NAT64 is enabled. Con...

CVE-2020-1680

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1680

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

Design/Logic Flaw

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1680 Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1680

CVE-2020-1680 affects Juniper Networks Junos OS on MX Series with MS-MIC/MS-MPC NAT64 translation. A malformed IPv6 packet can crash the MS-PIC component on the multiservice card, caused by translating the IPv6 packet to IPv4, allowing an unauthenticated attacker to trigger repeated MS-PIC crashe...

Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW due to a buffer overflow that occurs when an affected device inspects certain FTP traffic. An unauthenticated, remote attacker can exploit this issue by performing a specif...

Cisco IOS Software NAT64 Denial of Service Vulnerability

According to its self-reported version, IOS is affected by following vulnerability - A vulnerability in the Network Address Translation 64 NAT64 functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload.The...

CVE-2019-12655 Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

CVE-2019-12655

The CVE-2019-12655 issue affects Cisco IOS XE Software, specifically the FTP Application Layer Gateway (ALG) used with NAT, NAT64, and ZBFW. The vulnerability stems from a buffer overflow that occurs when the device inspects certain FTP traffic, enabling an unauthenticated, remote attacker to cau...

CVE-2019-12655 Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

CVE-2019-1751

A vulnerability in the Network Address Translation 64 NAT64 functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent...

Race condition

A vulnerability in the Network Address Translation 64 NAT64 functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent...

CVE-2019-1751 Cisco IOS Software NAT64 Denial of Service Vulnerability

A vulnerability in the Network Address Translation 64 NAT64 functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent...

CVE-2019-1751 Cisco IOS Software NAT64 Denial of Service Vulnerability

A vulnerability in the Network Address Translation 64 NAT64 functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent...

CVE-2019-1751

The CVE-2019-1751 entry concerns Cisco IOS Software NAT64 Denial of Service. Affected component: NAT64 functions in Cisco IOS; vulnerability due to incorrect handling of certain IPv4 packet streams, allowing unauthenticated remote attackers to cause interface queue wedges or device reloads (DoS)....

Cisco IOS NAT64 Denial of Service Vulnerability

Cisco IOS is the United States Cisco Cisco company's set of operating system developed for its network equipment. A denial of service vulnerability exists in the Network Address Translation 64 NAT64 feature of Cisco IOS, which arises from the program's failure to properly process IPv4 packet...