15278 matches found
Information disclosure
Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...
CVE-2021-3031
CVE-2021-3031 (Etherleak) affects PAN-OS on multiple Palo Alto Networks devices (PA-200/220/500/800/2000/3000/3200/5200/7000 series). Padding bytes in Ethernet frames are not cleared before frame creation, causing leakage of tiny memory fragments into packets. An attacker on the same Ethernet sub...
USN-4691-1 openvswitch vulnerabilities
Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-4691-1: Open vSwitch vulnerabilities
Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...
PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)
Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-5000 Series, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9006)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9006 advisory. - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9007)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9007 advisory. - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow...
CVE-2020-27827
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...
Palo Alto Networks PAN-OS 8.1.x < 8.1.18 / 9.0.x < 9.0.12 / 9.1.x < 9.1.5 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.18 or 9.0.x prior to 9.0.12 or 9.1.x prior to 9.1.5. It is, therefore, affected by a vulnerability. - Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series,...
Juniper Networks Junos OS Product Code Issue Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Junos OS NFX/SRX that can be exploited by an attacker to trigger a denial of service...
PT-2021-1738 · Cisco +1 · Snort +1
Name of the Vulnerable Software and Affected Versions: Multiple Cisco products affected versions not specified Description: The issue is related to a flaw in the detection algorithm of the Snort application detection engine, which could allow an unauthenticated, remote attacker to bypass the...
[ASA-202101-17] thunderbird: arbitrary code execution
Arch Linux Security Advisory ASA-202101-17 ========================================== Severity: Critical Date : 2021-01-12 CVE-ID : CVE-2020-16044 Package : thunderbird Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1440 Summary ======= The package...
Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk
Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...
Denial of Service Vulnerability in TP-Link TL-XDR3230 Easy Show Edition
The TL-XDR3230 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-XDR3230 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...
Denial of Service Vulnerability in TP-Link TL-XDR1850 Easy Show Edition
The TL-XDR1850 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-XDR1850 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...
Rockwell Automation RSLinx Classic Denial of Service Vulnerability (CNVD-2021-05087)
Rockwell Automation RSLinx Classic is a suite of industrial communication solutions from Rockwell Automation. The solution supports access to RockwellSoftware, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A denial of service vulnerability exists in Rockwell...
USN-4687-1: Firefox vulnerability
A use-after-free was discovered in Firefox when handling SCTP packets. An attacker could potentially exploit this to cause a denial of service, or execute arbitrary code...
DEBIAN-CVE-2020-36049
socket.io-parser before 3.4.1 allows attackers to cause a denial of service memory consumption via a large packet because a concatenation approach is used...
