5795 matches found
PT-2024-7151 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 21.2R3-S8-EVO Juniper Networks Junos OS Evolved versions from 21.4-EVO prior to 21.4R3-S8-EVO Juniper Networks Junos OS Evolved versions from 22.2-EVO prior to 22.2R3-S4-EVO Juniper Networks...
PT-2024-7143
Name of the Vulnerable Software and Affected Versions Junos OS Evolved versions prior to 21.4R3-S9-EVO Junos OS Evolved version 22.2-EVO prior to 22.2R3-S4-EVO Junos OS Evolved version 22.3-EVO prior to 22.3R3-S3-EVO Junos OS Evolved version 22.4-EVO prior to 22.4R3-S2-EVO Junos OS Evolved versio...
kernel: ipv6: prevent possible NULL dereference in rt6_probe()
A vulnerability was found in the Linux kernel's IPv6 routing component, where a NULL dereference occurs in the rt6probe function. This issue happens when the function attempts to access a resource without confirming its availability, leading to potential crashes...
kernel: ipv6: prevent possible NULL dereference in rt6_probe()
A vulnerability was found in the Linux kernel's IPv6 routing component, where a NULL dereference occurs in the rt6probe function. This issue happens when the function attempts to access a resource without confirming its availability, leading to potential crashes...
kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...
EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2024-2472)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified...
Tor: Multiple Vulnerabilities
Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CV...
CVE-2024-45809 Jwt filter crash in the clear route cache with remote JWKs in envoy
Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear route cache with remote JWKs. In the following case: 1. remote JWKs are used, which requires async header processing; 2. clearroutecache is enabled on the provider; 3. header...
[SECURITY] Fedora 40 Update: frr-9.1.1-2.fc40
FRRouting is free software that manages TCP/IP based routing protocols. It ta kes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga...
Envoy 缓冲区错误漏洞
Envoy is an Enphase open source gateway program for connecting smart home devices. A buffer error vulnerability exists in versions prior to Envoy 1.29, which stems from a Jwt filter that causes Envoy to crash when clearing the routing cache using a remote JWK...
kernel: ipv6: sr: fix out-of-bounds read when setting HMAC data.
An out-of-bounds read flaw was found when setting HMAC data in net/ipv6/seg6.c in the Linux kernel. This issue may lead to a crash...
find-my-way 安全漏洞
find-my-way is an NPM codebase from the Delvedor team that provides routing functionality. A security vulnerability exists in find-my-way, which stems from the fact that whenever there are two parameters in a single segment, an incorrect regular expression is generated, which may result in a deni...
CBL Mariner 2.0 Security Update: frr (CVE-2024-31950)
The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31950 advisory. - In FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA...
The vulnerability of the ospf_te_parse_ri() function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems allows a hacker to cause a service failure.
The vulnerability of the ospfteparseri function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems can lead to an out-of-buffer operation. Exploitation of this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the bgpattrencap() function in the bgpd/bgpattr.c file of the networking routing implementation software for Unix-like systems allows a attacker to cause a service failure.
The vulnerability of the bgpattrencap function in the bgpd/bgpattr.c file of the networking routing implementation software for Unix-like systems in FRRouting is related to the lack of checking the actual remaining flow length before assigning a value to the TLV. Exploiting this vulnerability cou...
The vulnerability of the software for implementing network routing on Unix-like systems is related to improper validation of the specified data type. This allows a malicious actor to cause service failures.
The vulnerability of the FRRouting software implementation for Unix-like systems is related to improper validation of the specified data type. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Dynamic Capability Handler component of the networking routing implementation software on Unix-like systems allows a attacker to cause a service failure.
The vulnerability of the Dynamic Capability Handler component in the software implementation for network routing on Unix-like systems is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...
haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers
HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server...
CVE-2024-20406
A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient...
CVE-2024-20406
A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient...