The vulnerability of the WhatsApp messaging and video call application, related to the execution of operations outside the buffer, allows a perpetrator to execute arbitrary code.

The vulnerability of the WhatsApp messaging and video call application is related to the issue of the operation outside the buffer during the processing of SRTCP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially created SRTCP packets...

CVE-2021-40117

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because incomin...

CVE-2021-22328: Undefined Security Weakness

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft the specific packet. Successful exploit may cause some services abnormal. Affected product versions include:CloudEngine 12800...

Buffer overflow

A vulnerability in the Multiprotocol Label Switching MPLS packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that...

CVE-2021-1614 Cisco SD-WAN Software Information Disclosure Vulnerability

A vulnerability in the Multiprotocol Label Switching MPLS packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that...

CVE-2021-1614

Summary of CVE-2021-1614 (Cisco SD-WAN) A vulnerability exists in the MPLS packet handling function of Cisco SD-WAN Software (and Cisco SD-WAN vManage) that could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. The root cause is insufficient h...

CVE-2021-1614 Cisco SD-WAN Software Information Disclosure Vulnerability

A vulnerability in the Multiprotocol Label Switching MPLS packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that...

CVE-2021-1614: Buffer Over-read

A vulnerability in the Multiprotocol Label Switching MPLS packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that...

PT-2021-14963

Name of the Vulnerable Software and Affected Versions: Huawei CloudEngine 12800 version V200R005C00SPC800 Huawei CloudEngine 5800 version V200R005C00SPC800 Huawei CloudEngine 6800 version V200R005C00SPC800 Huawei CloudEngine 7800 version V200R005C00SPC800 Description: There is a denial of service...

CVE-2020-9213: Undefined Security Weakness

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

CVE-2021-1387

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because the software improperly releases resources when it processes certain IPv6 packets that a...

PT-2021-12845

Name of the Vulnerable Software and Affected Versions: Huawei NGFW Module affected versions not specified Huawei NIP6300 affected versions not specified Huawei NIP6600 affected versions not specified Huawei NIP6800 affected versions not specified Huawei Secospace USG6300 affected versions not...

USN-4718-1 fastd vulnerability

It was discovered that fastd incorrectly handled certain packets. An attacker could possibly use this issue to cause a denial of service...

USN-4687-1 firefox vulnerability

A use-after-free was discovered in Firefox when handling SCTP packets. An attacker could potentially exploit this to cause a denial of service, or execute arbitrary code...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerability (USN-4687-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4687-1 advisory. A use-after-free was discovered in Firefox when handling SCTP packets. An attacker could potentially exploit this to cause a denial of...

DEBIAN-CVE-2020-27617

ethgetgsotype in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol...

CVE-2019-8744

A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iOS 13. A malicious...

kernel: net: bluetooth: type confusion while processing AMP packets

A flaw was found in the way the Linux kernel’s Bluetooth implementation handled L2CAP Logical Link Control and Adaptation Protocol packets with A2MP Alternate MAC-PHY Manager Protocol CID Channel Identifier. This flaw allows a remote attacker in an adjacent range to crash the system, causing a...

kernel: net: bluetooth: information leak when processing certain AMP packets

An information leak flaw was found in the way Linux kernel’s Bluetooth stack implementation handled initialization of stack memory when handling certain AMP Alternate MAC-PHY Manager Protocol packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory o...

PT-2020-4439

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Access Points APs Software affected versions not specified Description: The issue is related to insufficient input validation in the Ethernet packet handling of the software. An unauthenticated, adjacent attacker could cause a...