CVE-2020-24634

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI Aruba Networks AP Management protocol UDP port 8211 of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility...

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...

CVE-2020-24633

CVE-2020-24633: Multiple buffer-overflow flaws in Aruba’s PAPI over UDP port 8211 allow unauthenticated remote code execution on ArubaOS devices. Affected are Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, and Aruba 7200 Series Mobility Controllers with versions: 2.1.0.1, 2.2.0.0 and...

CVE-2020-24634

The CVE-2020-24634 vulnerability affects ArubaOS/PAPI on Aruba AP management UDP port 8211 (Aruba 9000 Gateway, Aruba 7000 and 7200 series mobility controllers). A remote attacker can inject arbitrary commands by sending specially crafted packets. Affected versions include Aruba 9000 gateway, and...

papi bug fix and enhancement update

An update is available for libpfm, papi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

ALBA-2020:4764 papi bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

Remote code execution

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

CVE-2018-7081

CVE-2018-7081 affects ArubaOS network-listening components on certain Mobility Controllers. The issue enables remote code execution when an attacker can send specially-crafted IP traffic to the device via the PAPI protocol over UDP port 8211. If successful, this could crash a process or allow arb...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

Fedora 28 : papi (2018-5f7b78636d)

Changes to the spec file ensure the executables are built with the LDFLAGS and CFLAGS flags as described on https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/bui ldflags.md to improve the security of the executables. Note that Tenable Network Security has extracted the preceding...

[SECURITY] Fedora 28 Update: papi-5.6.0-5.fc28

PAPI provides a programmer interface to monitor the performance of running programs...

Multiple vulnerabilities fixed in Aruba networks products

Multiple vulnerabilities have been discovered in various Aruba Networks products including Instant and ArubaOS access points, the Airwave management platform and the PAPI protocol that these systems mutually use. Some vulnerabilities have been fixed, others will be fixed in a future update, and f...

Aruba Authentication Bypass / Insecure Transport / Tons Of Issues

Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities ------------------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in Aruba AP, IAP and AMP devices. The Vulnerabilities were discovered during a bla...