Design/Logic Flaw

Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted...

CVE-2019-8580

Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted...

CVE-2019-8580

CVE-2019-8580 affects Apple AirPort Base Station Firmware (AirPort Extreme/Time Capsule).}}

Vulnerability fixed in Red Hat OpenShift

Red Hat has fixed a vulnerability in OpenShift. The vulnerability allows a malicious owner of a pod to possible to bypass a security measure in the restricted Context Constraints Object to bypass. This enables the malicious person to enabled to send custom network packets. Red Hat scales this...

The vulnerability of Junos operating system’s MX series and EX9200 Series routers allows a attacker to cause service interruptions.

The vulnerability of Junos operating system’s MX series and EX9200 Series routers lies in the lack of filtering for specific elements. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted IPv4 packets...

Low: Red Hat Security Advisory: OpenShift Container Platform 4.5.16 security update

Red Hat OpenShift Container Platform release 4.5.16 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which give...

Junos OS Multiple vulnerabilities (JSA11075)

According to its self-reported version number, the remote Juniper Junos device is affected by a memory leak within the EVPN protocol. It, Therefore, could allow for a adjacent unauthenticated attacker to crash the EVPN protocol with specifically crafted BGP packets. Note that Nessus has not teste...

AutoGadgetFS - USB Testing Made Easy

What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...

CVE-2020-27638

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

The vulnerability in the net/bluetooth/a2mp.c component of Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the net/bluetooth/a2mp.c component in Linux operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using specially crafted AMP packe...

The vulnerability of the set_WAN6 interface in Xiaomi R3600 router software allows a attacker to execute arbitrary code on the target system.

The vulnerability of the setWAN6 interface in Xiaomi R3600 router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system by sending specially crafted network packets...

The vulnerability of the net/bluetooth/hci_event.c component in Linux operating systems allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the net/bluetooth/hcievent.c component in Linux operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions using specially crafted L2CAP packets...

CVE-2020-3571

A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense FTD Software for Cisco Firepower 4110 appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incomplete input...

CVE-2020-3563

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could...

CVE-2020-3299

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for HTTP. The vulnerability is due to incorrect detection of modified HTTP packets used in chunked responses. An attacker...

Design/Logic Flaw

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could...

Input validation

A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense FTD Software for Cisco Firepower 4110 appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incomplete input...

CVE-2020-3299

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for HTTP. The vulnerability is due to incorrect detection of modified HTTP packets used in chunked responses. An attacker...

CVE-2020-3563 Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could...

CVE-2020-3563 Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could...