PT-2021-2121

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 17.3R3-S10 Junos OS versions 17.4 prior to 17.4R2-S12, 17.4R3-S3 Junos OS versions 18.1 prior to 18.1R3-S11 Junos OS versions 18.2 prior to 18.2R3-S6 Junos OS versions 18.3 prior to 18.3R3-S4 Junos OS versions 18.4...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3914-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

Cisco Video Surveillance 8000 Series IP camera DoS

The vulnerability of the Cisco Video Surveillance 8000 Series detection protocol lies in errors during the processing of detection protocol packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Cisco Video Surveillance DoS

The vulnerability of the Cisco Discovery protocol implemented in the IP camera software of the Cisco Video Surveillance series 8000 is related to errors in packet processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

EulerOS 2.0 SP8 : qemu (EulerOS-SA-2020-2531)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service attacks. An unauthenticated remote attacker could kill the QEMU process on the host due to an assertion failure in the network packet processing, resulting in a denial of service condition in nettxpktaddrawfragment in hw/net/nettxpkt.c...

Cisco IOS XR DoS

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Kr00k vulnerability (CVE-2019-15126) in Broadcom and Cypress Wi-Fi chips

During the RSA conference of February 26th 2020, researchers Štefan Svorencík and Robert Lipovsky disclosed a vulnerability in the implementation of the wireless egress packet processing of certain Broadcom Wi-Fi chipsets. This vulnerability is referenced as CVE-2019-15126 and could allow an...

Cisco IOS XR Software for ASR 9000 Series Slow Path Forwarding DoS (cisco-sa-xr-cp-dos-ej8VB9QY)

According to its self-reported version, IOS-XR is affected by a denial of service DoS vulnerability in the ingress packet processing function due to improper resource allocation when processing network traffic in software switching mode punted. An unauthenticated, remote attacker can exploit this...

CVE-2020-26070: Improper Resource Shutdown or Release

A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper resource...

Race condition

A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to insufficient TCP ingress packet rate...

CVE-2020-3574: Undefined Security Weakness

A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to insufficient TCP ingress packet rate...

CVE-2020-5942

In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer CEA packets with certain attributes from the Policy and Charging Rules Function PCRF server, the Traffic Management...

CVE-2020-5942

In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer CEA packets with certain attributes from the Policy and Charging Rules Function PCRF server, the Traffic Management...

Cisco IOS XE Kernel

The vulnerability of the Polaris kernel in Cisco IOS XE access points and Cisco Catalyst devices is related to packet processing errors. Exploiting this vulnerability can allow an attacker to cause malfunctions in the device...

PT-2020-4643

Name of the Vulnerable Software and Affected Versions Cisco IP Phone affected versions not specified Description The issue is related to errors in state management in the TCP packet processing functionality of Cisco IP Phones, which could allow a remote attacker to cause the phone to stop...

CVE-2020-3654

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti,...

Buffer overflow

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

PT-2020-17678

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions Agatti through SM8250 Snapdragon Compute versions Agatti through SM8250 Snapdragon Connectivity versions Agatti through SM8250 Snapdragon Consumer IOT versions Agatti through SM8250 Snapdragon Industrial IOT versions...

CVE-2020-3554 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...