Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2019-1436)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-11904

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940,...

CVE-2019-10511: Improper Validation of Array Index

Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098,...

EulerOS Virtualization for ARM 64 3.0.3.0 : net-snmp (EulerOS-SA-2019-2316)

According to the version of the net-snmp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was discovered that the snmppduparse mishandles error codes and is vulnerable to a heap corruption within the parsin...

Cisco IOS Short Message Service Denial of Service Vulnerability

According to its self-reported version, the installed Cisco IOS Software is affected by a vulnerability in its implementation of the Short Message Service SMS handling functionality. This allows an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device...

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XR Software is affected by multiple vulnerabilities: - A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker wh...

CVE-2019-1910: Improper Input Validation

A vulnerability in the implementation of the Intermediate System–to–Intermediate System IS–IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS–IS area to cause a denial of service DoS condition. The vulnerability is due to...

PT-2019-16087

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a missing bounds check in the l2c lcc proc pdu function of l2c fcr.cc, which could lead to a possible out of bounds write. This could result in remote code execution over...

PT-2019-16123

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound read in the llcp dlc proc rr rnr pdu function of llcp dlc.cc, due to a missing bounds check. This could lead to local information disclosure with no...

Suricata Out-of-Bounds Read Vulnerability

Suricata is a high-performance network intrusion detection IDS, intrusion prevention IPS and network security monitoring multi-threaded engine. An out-of-bounds read vulnerability exists in Suricata 4.0.4. The vulnerability stems from an integer overflow in DecodeENIPPDU in app-layer-enip-commmon...

Integer overflow

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check...

CVE-2018-10244

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check...

UBUNTU-CVE-2018-10244

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check...

CVE-2018-10244

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check...

CVE-2018-10244

Suricata 4.0.4 has a parsing bug in DecodeENIPPDU for EtherNet/IP PDUs, causing an out-of-bounds read due to an integer overflow in length checking. This is a network-vector issue affecting Suricata 4.0.4; upgrading to Suricata 4.0.5 or later is recommended (per referenced advisory). Evidence and...

CVE-2019-1747: Improper Input Validation

A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...

Denial Of Service (DoS)

libnetsnmp.so is vulnerable to denial of service DoS attacks. A malicious user can pass a GetNext PDU with multiple Varbinds to the application, causing a NULL Pointer Exception that can crash the application...

PT-2018-1964

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a missing bounds check in the l2c lcc proc pdu function of l2c fcr.cc, which could lead to an out of bounds write. This could result in remote escalation of privilege over...

CVE-2017-10607: Undefined Security Weakness

Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit PDU sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this...

PT-2017-11404

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 16.1R1 through 16.1R1-S3 Description The issue is caused by the receipt of a crafted BGP Protocol Data Unit PDU sent directly to the router, which can cause the RPD routing process to crash and restart. This...