JVN#38732359: Multiple Yamaha network devices vulnerable to denial-of-service (DoS)

Multiple network devices provided by Yamaha Corporation contain a denial-of-service DoS vulnerability CWE-400 due to an issue in processing received packets. Impact A remote attacker may be able to cause a denial-of-service DoS condition. Solution Update the firmware Update to the latest version ...

Huawei USG6330 DoS

The vulnerability of the Huawei USG6330 network firewall is related to errors in processing network packets. Exploiting this vulnerability can allow a remote attacker to exhaust the available memory and cause the device to reboot...

Buffer overflow

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...

CVE-2019-14095

CVE-2019-14095 describes a buffer overflow in Snapdragon devices during LMP packet processing when the Bluetooth name length exceeds the BT specification. Affected families include Snapdragon Auto, Compute, Connectivity, and related Snapdragon devices across numerous SoCs (APQ8009, SDM… etc.). Th...

Wireshark 3.0.x < 3.0.8 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.8. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.8 advisory. - In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in...

Wireshark 3.0.x < 3.0.8 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.0.8. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.8 advisory. - In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c b...

Fedora Update for dpdk FEDORA-2019-019df9a459

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Weak Password Vulnerability in Tianrongxin NGFW® Next-Generation Firewall

NGFW®, the next-generation firewall of TIANRONGXIN, adopts its own patented operating system NGTOS and security engine, utilizes the advanced Intel® Xeon® processor family and integrates the packet processing framework provided by Intel® Data Plane Development Kit to provide network processing...

[SECURITY] Fedora 31 Update: dpdk-18.11.2-3.fc31

The Data Plane Development Kit is a set of libraries and drivers for fast packet processing in the user space...

Kernel: vhost_net: infinite loop while receiving packets leads to DoS

An infinite loop issue was found in the vhostnet kernel module while handling incoming packets in handlerx. The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhostnet kernel thread,...

Kernel: vhost_net: infinite loop while receiving packets leads to DoS

An infinite loop issue was found in the vhostnet kernel module while handling incoming packets in handlerx. The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhostnet kernel thread,...

Kernel: vhost_net: infinite loop while receiving packets leads to DoS

An infinite loop issue was found in the vhostnet kernel module while handling incoming packets in handlerx. The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhostnet kernel thread,...

Junos OS: SIP ALG flowd DoS (JSA10953)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the SIP ALG packet processing service which allows an attacker to cause a Denial of Service DoS to the device. A remote, unauthenticated attacker can exploit this by sending specific...

Junos OS SRX DoS

The vulnerability of the Junos OS router series lies in errors in the processing of IP packets passing through the IPsec tunnel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

CVE-2019-0055

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing...

Design/Logic Flaw

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing...

Norton Password Manager Module IP Address Replacement

The vulnerability of the Norton Password Manager password manager is related to errors in IP packet processing. Exploiting this vulnerability could allow a malicious actor to replace the IP address...

Cisco IOS DoS

The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE Reboot

The vulnerability of the Unified Threat Defense UTD function in the Cisco IOS XE operating system is related to errors in packet processing for IPv6. Exploiting this vulnerability can allow a malicious actor to trigger a reboot of the vulnerable device through specially crafted IPv6 traffic...

PT-2019-3163 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows Server DHCP service affected versions not specified Description: A memory corruption issue exists in the Windows Server DHCP service when it processes specially crafted packets. This could allow a remote unauthenticated attacker to...