ISPsystem COREmanager Authentication Bypass

An authentication bypass vulnerability exists in ISPsystem COREmanager. A remote attacker could exploit this flaw by sending specially crafted packets to the affected server. Successful exploitation of this vulnerability would allow a remote attacker to hijack a user's session and escalating thei...

Security Advisory 0040

Security Advisory 0040 PDF Date: April 16th, 2019 Last Updated: April 29th, 2019 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | April 16th, 2019 | Initial Release 1.1 | April 29th, 2019 | Updated with CVE reference and mitigation for impacted versions The CVE-ID tracking this issue is...

Juniper Networks SRX340 and Juniper Networks SRX345 Junos OS Resource Management Error Vulnerability

The Juniper Networks SRX340 and Juniper Networks SRX345 are both Juniper Networks products.The Juniper Networks SRX340 is a 340 Series security services gateway appliance.The Juniper Networks SRX345 is a 345 Series security services gateway appliance. The Juniper Networks SRX340 is a 340 Series...

The vulnerabilities of Cisco IOS and Cisco IOS XE operating systems, related to errors in processing IP Service Level Agreement packets, allow attackers to trigger service interruptions.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems is related to errors in processing IP Service Level Agreement SLA packets. Exploiting this vulnerability allows a malicious actor to trigger service interruptions using specially crafted packets...

The vulnerability in the implementation of the Performance Routing Protocol Version 3 on the Cisco IOS XE operating system allows a attacker to cause a service failure.

The vulnerability of the Performance Routing Protocol Version 3 PfRv3 implementation in the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets t...

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol (CMP) in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger service failures using speciall...

Race condition

Crafted packets destined to the management interface fxp0 of an SRX340 or SRX345 services gateway may create a denial of service DoS condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this...

CVE-2019-0038

Crafted packets destined to the management interface fxp0 of an SRX340 or SRX345 services gateway may create a denial of service DoS condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this...

CVE-2019-0038

Crafted packets destined to the management interface fxp0 of an SRX340 or SRX345 services gateway may create a denial of service DoS condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this...

CVE-2019-0008

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager FXPC process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code...

CVE-2019-0036

When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" e.g. "internal-1", "internal-2", etc. are silently ignored. No warning is issued during configuration, and the config is committed without error, but the filter criteria will match all packets...

CVE-2019-0031 Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.

Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests. Once started, memory consumption will eventually impact any IPv4 or IPv6 request serviced by the...

CVE-2019-0688

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'...

Windows TCP/IP Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have ...

EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1227)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...

PT-2019-5204 · Graphicsmagick +4 · Graphicsmagick +4

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20190322 Q8 Description: The issue is related to a heap-based buffer over-read in the ReadMIFFImage function, which can be exploited by remote attackers to cause a denial of service or disclose information...

Cisco IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities

According to its self-reported version, Cisco IOS XE Software is affected by following multiple vulnerabilities - Multiple vulnerabilities in the Network-Based Application Recognition NBAR feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to...

Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in the Cisco Encrypted Traffic Analytics ETA feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition.The...

Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in Performance Routing Version 3 PfRv3 of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload.The vulnerability is due to...

The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...