677 matches found
DEBIAN-CVE-2017-13036
The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...
Juniper Junos Protocol Daemon (RPD) BGP OPEN Message Handling DoS (JSA10779)
According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd due to improper handling of BGP OPEN messages. An unauthenticated, remote attacker can exploit this, via a specially...
Design/Logic Flaw
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...
CVE-2017-3752
CVE-2017-3752 affects Lenovo/IBM networking gear implementing OSPF. The issue is an industry‑wide OSPF protocol implementation flaw that can allow an attacker within a routing domain to erase or alter routing tables by sending crafted OSPF messages, potentially impacting multiple devices that sup...
Design/Logic Flaw
Cisco IOS 12.0 through 15.6, Adaptive Security Appliance ASA Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability...
CVE-2017-6770: Improper Input Validation
Cisco IOS 12.0 through 15.6, Adaptive Security Appliance ASA Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability...
Cisco Fixes DoS, Authentication Bypass Vulnerabilities, OSPF Bug
Cisco fixed 15 vulnerabilities this week in more than a dozen products, including two high severity vulnerabilities that could have let an attacker trigger a denial of service condition or bypass local authentication. The more severe bugs fixed on Wednesday exist in the company’s Identity Service...
tcpdump: tcp printer rpki_rtr_pdu_print() missing length check
The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...
IBM i OSPF Denial of Service Vulnerability
IBM i is a set of EBCDIC code-based operating systems running in IBM Power Systems and IBM PureSystems from IBM Corporation in the U.S. OSPF Open Shortest Path First is one of the link-state routing protocols. A denial of service vulnerability exists in OSPF in IBM i. An attacker could exploit th...
Multiple Cisco Products OSPF LSA Manipulation Vulnerability
Multiple Cisco products are affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could allow an unauthenticated, remote attacker to take full control of the OSPF Autonomous System AS domain routing table...
Design/Logic Flaw
On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...
Juniper Junos Routing Process Daemon BGP UPDATE DoS (JSA10778)
According to its self-reported version and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd when handling a specially crafted BGP UPDATE. An unauthenticated, remote attacker can exploit this to repeatedly crash and...
Juniper Junos Routing Protocol Daemon LDP Packet DoS (JSA10777)
According to its self-reported version and configuration, the remote Juniper Junos device is affected by a memory leak issue in the routing protocol daemon rpd when handling a specific LDP packet, which over time will consume memory that cannot be freed without restarting the rpd process. An...
Quagga Buffer Overflow Vulnerability
Quagga is a routing software suite. The suite implements protocols such as OSPFv2, OSPFv3, and RIP v1/v2 on a variety of platforms and provides route redistribution, route mapping, and other features. Quagga suffers from a buffer overflow vulnerability that can be exploited by an attacker to...
The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure
The vulnerability of the VMX component of the Xen hypervisor is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to cause a service failure by engaging in actions related to the RIP protocol...
wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)
Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service application crash via a crafted packet, related to the use of...
FreeBSD Security Advisory FreeBSD-SA-15:19.routed
============================================================================= FreeBSD-SA-15:19.routed Security Advisory The FreeBSD Project Topic: routed8 remote denial of service vulnerability Category: core Module: routed Announced: 2015-08-05 Credits: Hiroki Sato Affects: All supported version...
wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)
Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service application crash via a crafted packet, related to the use of...
Wireshark DEC DNA Routing Protocol Handles Remote Denial of Service Vulnerability
Wireshark is an open source network protocol analysis tool. The setdnetaddress function in the Wireshark DEC DNA routing protocol 'packet-dec-dnart.c' handles data with a pointer error, which allows remote attackers to exploit vulnerabilities to construct malicious messages and trick users into...