Open Policy Agent 安全漏洞

Open Policy Agent is an open source, general-purpose policy engine that enables uniform, context-aware policy enforcement across the stack. A security vulnerability exists in Open Policy Agent OPA Gatekeeper prior to 3.7.0, which stems from an error handling concurrency that sometimes leads to...

PT-2021-23990 · Styra · Styra Open Policy Agent (Opa) Gatekeeper

Name of the Vulnerable Software and Affected Versions: Styra Open Policy Agent OPA Gatekeeper versions 3.7.0 and earlier Description: The issue arises from the mishandling of concurrency, which can result in incorrect access control. This occurs because the data replication mechanism, allowing...

CVE-2021-1622

A vulnerability in the Common Open Policy Service COPS of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service DoS condition. This vulnerability is due to a deadlock conditi...

CVE-2021-1622 Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability

A vulnerability in the Common Open Policy Service COPS of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service DoS condition. This vulnerability is due to a deadlock conditi...

CVE-2021-1622

A vulnerability in the Common Open Policy Service COPS of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service DoS condition. This vulnerability is due to a deadlock conditi...

多款Cisco产品资源管理错误漏洞

Cisco IOS and others are products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.IOS XE is a set of operating systems developed for its network devices.SD-WAN Software is one of the software-defined WAN software.Cisco IOS XE Software is an operating system...

The vulnerability of the Common Open Policy Service (COPS) service in the Cisco IOS XE operating system, exposed by Cisco cBR-8 gateways, allows a attacker to cause a malfunction in the device’s operation.

The vulnerability of the Common Open Policy Service COPS service in the Cisco IOS XE operating system, when exposed by Cisco cBR-8 broadband routers, is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the device...

CVE-2020-3526 Cisco IOS XE Software Common Open Policy Service Engine Denial of Service Vulnerability

A vulnerability in the Common Open Policy Service COPS engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to crash a device. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2020-3526

Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers is affected by CVE-2020-3526 in the Common Open Policy Service (COPS) engine. The issue arises from insufficient input validation in the COPS engine, allowing an unauthenticated, remote attacker to crash the device by sending a malf...

Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20171213-01-buffer)

There is a buffer overflow vulnerability in the Common Open Policy Service Protocol COPS module of some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2020-15091 · Huawei · Huawei Products +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding functi...

PT-2020-15097 · Huawei · Huawei +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: The issue is related to out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol. A specific decoding function may cause an...

PT-2020-15099 · Huawei · Huawei +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: The issue is related to multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol. A specific decoding function may cause...

PT-2020-15101 · Huawei · Huawei +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: The issue is related to multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol. A specific decoding function may occur...

PT-2020-15098 · Huawei · Huawei +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: The issue is related to out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol. A specific decoding function may cause an...

Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20180502-02-cops)

There is a buffer overflow vulnerability in the Common Open Policy Service Protocol COPS module of some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cross-site Scripting (XSS)

github.com/open-policy-agent/opa is vulnerable to cross-site scriptingXSS attacks. The library does not properly escape user input string parameters before being included in the rendered index.html page, allowing a malicious user to inject and execute malicious web script...

Common Open Policy Service Protocol module buffer overflow vulnerability in multiple Huawei products

Huawei USG6300 is a firewall device. TE30 is an all-in-one HD videoconferencing endpoint device. common open policy service protocol COPS is one of the common open policy service protocol COPS modules. （Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...

CVE-2017-15350

The Common Open Policy Service Protocol COPS module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20,...

Buffer overflow

The Common Open Policy Service Protocol COPS module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20,...