Lucene search
+L

3197 matches found

osv_ubuntu
osv_ubuntu
•added 2024/04/07 9:15 p.m.•30 views

UBUNTU-CVE-2024-31948

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

6.5CVSS7.3AI score0.00825EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/07 12:00 a.m.•54 views

CVE-2024-31948

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

9.5AI score0.00825EPSS
SaveExploits0References3
CVE
CVE
•added 2024/04/07 12:00 a.m.•160 views

CVE-2024-31948

In FRRouting (FRR) versions through 9.1 , a vulnerability exists where a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash. The root cause is identified as improper validation of the specified data type (CWE-1287), which allows a remote actor to trigger a de...

6.5CVSS6.2AI score0.00825EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2024/04/07 12:00 a.m.•11 views

CVE-2024-31948

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

7.1CVSS0.00825EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2024/04/07 12:00 a.m.•57 views

CVE-2024-31948

In FRRouting FRR through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash...

6.5CVSS6.8AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•20 views

FRouting security vulnerabilities

FRRouting is an open source network routing software suite from the FRRouting Project that runs on Unix-like platforms. A security vulnerability exists in FRRouting FRR versions 9.1 and earlier, which originates from a vulnerability that allows an attacker to cause the bgpd daemon to crash by usi...

6.5CVSS6.9AI score0.00825EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/04/04 3:23 p.m.•113 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.5CVSS6.9AI score0.93547EPSS
SaveExploits4References23
RedHat Linux
RedHat Linux
•added 2024/04/04 3:23 p.m.•41 views

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

5.9CVSS6.7AI score0.93547EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2024/04/04 3:23 p.m.•136 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.5CVSS6.9AI score0.93547EPSS
SaveExploits4References23
RedHat Linux
RedHat Linux
•added 2024/04/04 3:23 p.m.•30 views

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

5.9CVSS6.7AI score0.93547EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2024/04/04 3:23 p.m.•31 views

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

5.9CVSS6.7AI score0.93547EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2024/03/28 5:31 a.m.•67 views

Critical: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift Builds 1.0.1

An update is now available for Red Hat OpenShift Builds 1.0. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

9.8CVSS7AI score0.93547EPSS
SaveExploits4References4
osv_clsa
osv_clsa
•added 2024/03/26 6:03 p.m.•35 views

CLSA-2024-1711475067 libssh: Fix of 2 CVEs

CVE-2023-1667: fix possible NULL-pointer dereference during re-keying with algorithm guessing - CVE-2023-48795: fix the prefix truncation attack on Binary Packet Protocol...

6.5CVSS7AI score0.93547EPSS
SaveExploits4References1
Kitploit
Kitploit
•added 2024/03/11 11:30 a.m.•31 views

n0Mac - Yet Another Mac Changer!!!

This script changes the MAC address of the network interface to a randomly generated address on system startup using crontab. It then uses the macchanger command to generate a list of MAC address vendors and selects one at random and then combines that vendor prefix with a randomly generated suff...

7.4AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/03/06 5:52 p.m.•37 views

Low: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.9CVSS6.9AI score0.93547EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2024/03/06 5:52 p.m.•20 views

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

5.9CVSS6.7AI score0.93547EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2024/03/06 3:38 p.m.•71 views

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS6.9AI score0.93547EPSS
SaveExploits5References6
osv_bit
osv_bit
•added 2024/03/06 11:08 a.m.•49 views

BIT-GITLAB-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6AI score0.01611EPSS
SaveExploits1References4
osv_bit
osv_bit
•added 2024/03/06 11:07 a.m.•32 views

BIT-GOLANG-2020-29509

The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...

9.8CVSS7.1AI score0.02099EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2024/03/06 11:06 a.m.•26 views

BIT-GOLANG-2020-29511

The encoding/xml package in Go all versions does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...

9.8CVSS7AI score0.01966EPSS
SaveExploits0References3
Rows per page
Query Builder