CVE-2020-11810

OpenVPN 2.4.x prior to 2.4.9 is affected by CVE-2020-11810. An attacker can inject a P_DATA_V2 data channel packet using a victim’s peer-id, potentially dropping the victim’s connection if the packet arrives before data channel crypto parameters are initialized. The attack relies on a small timin...

Wireshark 3.2.x < 3.2.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.2 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak...

CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

Design/Logic Flaw

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

CVE-2019-11189

The CVE describes an Authentication Bypass in ONOS v2.0 and earlier via data plane packet injection. A gratuitous ARP reply can trigger the host mobility application to remove existing access control flow denial rules, and the access control app does not re-install those deny rules, allowing bypa...

PT-2020-9168

Name of the Vulnerable Software and Affected Versions ONOS versions prior to 2.1 Description The issue allows attackers to bypass network access control via data plane packet injection, specifically by exploiting the authentication bypass by spoofing in the access control and host mobility...

FreeBSD : FreeBSD -- Missing IPsec anti-replay window check (5797c807-4279-11ea-b184-f8b156ac3ff9)

A missing check means that an attacker can reinject an old packet and it will be accepted and processed by the IPsec endpoint. Impact : The impact depends on the higher-level protocols in use over IPsec. For example, an attacker who can capture and inject packets could cause an action that was...

Wireshark 3.0.x < 3.0.7 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.7 advisory. - In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in...

PT-2019-14516

Name of the Vulnerable Software and Affected Versions Blade Shadow versions through 2.13.3 Description The issue allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address. This is possible because packet data can be injected in...

CVE-2019-16110: Undefined Security Weakness

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

CVE-2019-3419: Undefined Security Weakness

A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10M2NCP. An attacker could exploit this vulnerability to build a link to the device and send specific packets to cause a denial of service...

CVE-2019-1951

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

Cisco SD-WAN Solution Packet Filter Bypass Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco. A packet filter bypass vulnerability exists in Cisco SD-WAN Solution version 19.1.0 and earlier. The vulnerability stems from improper traffic filtering conditions on the affected device. An attacker can exploit this...

CVE-2019-1951: Improper Input Validation

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

USN-3986-1: Wireshark vulnerabilities

It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malform packets onto the wire or convincing someone to read a malformed packet trace file...

Wireshark 2.4.x < 2.4.14 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.14 advisory. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was...

Wireshark 2.4.14, 2.6.8, 3.0.1 Security Updates (Apr 2019) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...