Lucene search
+L

677 matches found

Cvelist
Cvelist
•added 2020/08/29 3:15 p.m.•48 views

CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protoco...

8.6CVSS8.6AI score0.03702EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/08/29 3:00 a.m.•79 views

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol IGMP process or make it consume available memory and eventually cras...

8.6CVSS8.4AI score
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2020/08/29 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-3566

Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...

8.6CVSS7.8AI score0.03702EPSS
SaveIn wildExploits0References3
Positive Technologies
Positive Technologies
•added 2020/08/26 12:00 a.m.•10 views

PT-2020-3782 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software, which could allow an unauthenticated, remote attacker to exhaust...

8.6CVSS6.7AI score0.03702EPSS
SaveExploits0References14
OSV
OSV
•added 2020/07/17 7:15 p.m.•16 views

CVE-2020-1640

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

7.5CVSS7.1AI score0.01388EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/29 12:00 a.m.•15 views

ABB System 800xA RNRP Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA RNRP is a redundant network routing protocol from ABB Switzerland used in the ABB System 800xA distributed control system. A vulnerability in ABB System 800xA RNRP all versions with privilege permission and access control issues can be exploited by a local attacker to inject data...

7.8CVSS6.8AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/08 8:15 p.m.•19 views

CVE-2020-1629

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon RPD process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11;...

5.9CVSS5.8AI score0.00683EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/01 12:00 a.m.•5 views

Denial of Service Vulnerability in Riptide RSR Series Routers

Riptide Networks, Inc. is a data communications solutions provider. A denial-of-service vulnerability exists in Ruijie RSR20 series routers, which can be exploited by attackers to cause protocol breakage during restart of routing protocol processes such as OSPF/BGP, resulting in a denial-of-servi...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/03/13 12:00 a.m.•25 views

Cisco IOS XR Software Intermediate System-to-Intermediate System DoS (cisco-sa-20200122-ios-xr-dos)

According to its self-reported version, the Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality due to improper handling of a Simple Network Management Protocol SNMP...

7.7CVSS7AI score0.01513EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/02/11 12:00 a.m.•12 views

The vulnerability of the Junos OS’ Routing Protocol Daemon (RPD) allows a attacker to cause a service failure.

The vulnerability of the Junos OS’ Routing Protocol Daemon RPD is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.01196EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/01/15 9:15 a.m.•23 views

Design/Logic Flaw

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

6.8CVSS6.3AI score0.01196EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•4 views

CVE-2020-1600: Uncontrolled Resource Consumption

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

6.8CVSS6.6AI score0.01196EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/01/10 12:00 a.m.•16 views

Juniper Networks Junos OS SNMP Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Routing Protocol Daemon RPD in Juniper Networks Junos OS. An attacker could exploit...

6.8CVSS6.7AI score0.01196EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•61 views

Fedora Update for bird FEDORA-2019-ff0f9ce167

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.03153EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/01/08 12:00 a.m.•38 views

Cisco IOS Forwarding Information Base DoS (cisco-sa-20180328-FIB-dos)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Forwarding Information Base code due to a limitation in the way the FIB is internally representing recursive routes. An unauthenticated, network attacker can exploit this, by injecting...

7.1CVSS5.9AI score0.00996EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/01/08 12:00 a.m.•50 views

Cisco IOS XE Software Forwarding Information Base DoS (cisco-sa-20180328-FIB-dos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Forwarding Information Base code due to a limitation in the way the FIB is internally representing recursive routes. An unauthenticated, network attacker can exploit this, by...

7.1CVSS5.8AI score0.00996EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•20 views

The vulnerability in the packet routing protocol implementation in Unix-like operating systems, bird, arises from copying buffers without checking the size of the input data. This allows a malicious actor to cause a service failure.

The vulnerability in the packet routing protocol implementation in Unix-like operating systems, bird, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.1AI score0.03153EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2019/11/27 12:00 a.m.•53 views

Cisco IOS OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco IOS is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to cause the...

4.2CVSS6.3AI score0.01693EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/11/27 12:00 a.m.•29 views

Cisco NX-OS Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to...

4.2CVSS6.3AI score0.01693EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2019/11/27 12:00 a.m.•29 views

Cisco IOS XE Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to...

4.2CVSS6.3AI score0.01693EPSS
SaveExploits0References3
Rows per page
Query Builder