436 matches found
CVE-2019-0013 Junos OS: RPD crash upon receipt of malformed PIM packet
The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...
CVE-2018-0045
Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...
Design/Logic Flaw
Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...
CVE-2018-0045
CVE-2018-0045 describes a vulnerability in Juniper Networks Junos OS where receiving a specific Draft-Rosen MVPN control packet can crash and restart the RPD daemon, with potential remote code execution. Exploitation is possible from the PE device within the MPLS core; end users on CE cannot trig...
CVE-2018-0045 Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration
Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...
Security Bulletin: Vulnerability found in OpenSSL release used by Windows and z/OS Security Identity Adapters (CVE-2017-3736)
Summary A vulnerability was found in the OpenSSL release used by the Windows and z/OS Security Identity Adapters. These adapters have been upgraded to a more current OpenSSL release that corrects CVE-2017-3736, "bnsqrx8xinternal carry bug on x8664" vulnerability. Vulnerability Details CVEID:...
Security Bulletin: Security Identity Adapter data traffic to/from server is not encrypted by default
Summary Security Identity Adapter data traffic to/from IGI and ISIM server is not encrypted by default. Adapter installers have been updated to enable SSL by default. The customer can choose during installation to disable SSL. Note that keeping the SSL enablement option requires certificates to b...
Security Bulletin: Vulnerability found in OpenSSL release used by Windows and z/OS Security Identity Adapters
Summary A vulnerability was found in the OpenSSL release used by the Windows and z/OS Security Identity Adapters. These adapters have been upgraded to a more current OpenSSL release that corrects the CVE CVE-2016-8610 "SSL Death Alert: OpenSSL SSL/TLS SSL3ALWARNING undefined alert Remote DoS"...
[SECURITY] Fedora 27 Update: quagga-1.2.2-1.fc27
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP...
[SECURITY] Fedora 26 Update: quagga-1.2.2-1.fc26
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP...
EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1280)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint.CVE-2017-13048 - The ARP parser in tcpdump before...
EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1281)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint.CVE-2017-13048 - The ARP parser in tcpdump before...
Akeneo PIM CE and EE Command Injection Vulnerabilities
Akeneo PIM CE is a cloud-based, open source product information management system, and Akeneo PIM EE is its enterprise version. A command injection vulnerability exists in Akeneo PIM CE and EE. A remote attacker could exploit this vulnerability to execute shell commands...
CVE-2017-13030
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...
CVE-2017-13030
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...
Design/Logic Flaw
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...
CVE-2017-13030
CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...
CVE-2017-13030
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...
